Hackers Dubbed 'Trinity of Chaos' Leak 1.5 Billion Records After Salesforce Breach
Hackers, linked to notorious groups like Lapsus$ and ShinyHunters, have struck again. Dubbing themselves 'Trinity of Chaos', they've exploited Salesforce flaws to breach 39 firms, leaking over 1.5 billion records. The FBI has issued a warning, as the group threatens to add more high-profile companies to their list.
The group initially targeted Salesforce instances, stealing substantial amounts of personally identifiable information (PII) without passwords. They've since shifted to a traditional ransomware approach, demanding payment or facing data leaks.
The data leak site, hosted on the Tor network, currently displays records from companies like Aeromexico, AirFrance, Google, and Cisco. The group claims to have updated the site with over 1.5 billion records, threatening to add more companies, including Tesla, Sony, and Microsoft, post-October 10.
The FBI has issued a flash warning, urging companies to monitor for potential Salesforce environment infiltrations. The full extent of compromised data across various sectors is still emerging.
The 'Trinity of Chaos' group's activities pose a significant threat, with potentially harmful AI applications and targeted attacks looming. Companies are urged to enhance their cybersecurity measures and remain vigilant.