ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites Salesforce customers have, once again, been targeted by the ShinyHunters group – or, at least, it’s what the group claims. Attackers modified and abused benign tool On Saturday, Saleforce confirmed that its security team has identified an attack campaign by unnamed malicious actors looking to access customers’ data. The attackers are not leveraging a vulnerability in the Salesforce platform, the company said, but are using a modified version of the open-source tool Aura Inspector – a tool originally developed by Mandiant – to: Mass scan public-facing Experience Cloud sites Probe their /s/sfsites/aura API endpoint If the guest user profile has excessive permissions, query Salesforce CRM objects without logging in.…