--- title: "UNC6040: Salesforce Voice Phishing (Vishing) Attacks: What You Need to Know - Salesforce Ops - Arovy" description: "UNC6040's voice phishing (vishing) campaign targeting Salesforce customers has sent shockwaves across industries. Learn what steps you should take today to ensure your Salesforce environment is protected. - Category: Salesforce Ops - Arovy" image: https://www.arovy.com/hubfs/Untitled%20design%20(2)-3.png --- [![arovy-logo-dark](https://www.arovy.com/hubfs/arovy-logo-dark.png)](https://www.arovy.com/) - Product - Solutions - Resources - Company - [Contact](https://www.arovy.com/contact) [Login](https://app.seesonar.com/?_ga=2.107586177.2061971783.1595815103-1960554115.1586437671) Book Demo - Product [![Data Dictionary](https://www.arovy.com/hubfs/Facebook%20Icon%20(8).webp) Data Dictionary AI-Powered Salesforce Data Documentation](https://www.arovy.com/data-dictionary)[![Impact Analysis and Dependency Mapping](https://www.arovy.com/hubfs/Impact%20Analysis%20and%20Dependency%20Mapping.png) Impact Analysis and Dependency Mapping Seamless visibility into all references across your organization.](https://www.arovy.com/impact-analysis-dependency-mapping)[![Change Tracking & Enhanced Audit Trail](https://www.arovy.com/hubfs/Facebook%20Icon%20(7).webp) Change Tracking & Enhanced Audit Trail Use a timeline view to track changes made across teams.](https://www.arovy.com/change-tracking-enhanced-audit-trail)[![Data Classification](https://www.arovy.com/hubfs/Facebook%20Icon%20(9).webp) Data Classification Ensure compliance with capture for every field added.](https://www.arovy.com/data-classification)[![Application Security Monitoring](https://www.arovy.com/hubfs/Facebook%20Icon%20(10).webp) Application Security Monitoring Keep a pulse on every integration and user.](https://www.arovy.com/application-security-monitoring)[![API Monitoring & System Uptime](https://www.arovy.com/hubfs/Facebook%20Icon%20(11).webp) API Monitoring & System Uptime Seamlessly detect every integration outage.](https://www.arovy.com/api-monitoring-system-uptime)[![Threat Detection & Risk Mitigation ](https://www.arovy.com/hubfs/Facebook%20Icon%20(12).webp) Threat Detection & Risk Mitigation Visual threat-detection and suggested action plans.](https://www.arovy.com/threat-detection-risk-mitigation) - Solutions [![Target Icon-1](https://www.arovy.com/hubfs/Target%20Icon-1.webp) Scope Salesforce Projects Confidently Understand impacts across Salesforce and your integrated tech stack.](https://www.arovy.com/solutions/scope-sfdc-projects/)[![Data Base Icon](https://www.arovy.com/hubfs/Data%20Base%20Icon.webp) Eliminate Tech Debt with AI Insights into every piece of data and configuration.](https://www.arovy.com/solutions/eliminate-tech-debt)[![Map point icons](https://www.arovy.com/hubfs/Map%20point%20icons.webp) Monitor Setup Audit Trail Automated access audits with Arovy.](https://www.arovy.com/solutions/monitor-setup-audit-trail)[![Shine Icon](https://www.arovy.com/hubfs/Shine%20Icon.webp) Reduce Agentforce Risk with AI Ensure the accuracy and usefulness of AI models.](https://www.arovy.com/solutions/reduce-agentforce-risk-with-ai)[![User Icon](https://www.arovy.com/hubfs/User%20Icon.webp) Automate User Profile Management Protect data and stay compliant with user access policies.](https://www.arovy.com/solutions/automate-user-profile-management)[![Shield Icon](https://www.arovy.com/hubfs/Shield%20Icon.webp) Optimize Shield Implementation Visualize Salesforce activity to spot anomalies and prevent leaks.](https://www.arovy.com/solutions/salesforce-shield)[![Process Icon](https://www.arovy.com/hubfs/Process%20Icon.webp) Visualize Connected Apps Get real-time visibility into apps accessing your Salesforce data.](https://www.arovy.com/solutions/visualize-connected-apps-to-reduce-integration-risk)[![icon](https://www.arovy.com/hubfs/Danger%20Icon-1.png) Stop Salesforce Phishing Attacks Block unauthorized Salesforce integrations without disrupting your business.](https://www.arovy.com/stop-salesforce-phishing-attacks) - Resources [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.webp) Blog Read the Arovy Blog](https://www.arovy.com/resources/blog) [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.webp) Webinars Watch the Latest Webinar](https://www.arovy.com/resources/webinars) Follow Us [![LinkedIn Icon](https://www.arovy.com/hubfs/LinkedIn%20Icon.svg)](https://www.linkedin.com/company/sonarsoftware.com?__hstc=24482917.e5b55d6fa1b1ae884b668cdcd6e03155.1745874937734.1746634187535.1746643628231.21&__hssc=24482917.1.1746643628231&__hsfp=3161940081) [![YouTube Icon](https://www.arovy.com/hubfs/YouTube%20Icon.svg)](https://www.youtube.com/channel/UCQwhXnb9tcw07SK78qnxiJw) Latest Resources - [![Webinar: Salesforce Data Dictionary: Build It Yourself or Automate It?](https://www.arovy.com/hs-fs/hubfs/Webinar_3%20Speakers%20(2)-2.jpg?width=960&name=Webinar_3%20Speakers%20(2)-2.jpg) Webinar: Salesforce Data Dictionary: Build It Yourself or Automate It? Join Arovy to learn how to build and maintain a Salesforce data dictionary, where LLMs can help, and when an automated approach makes more sense.](https://www.arovy.com/resources/webinars/webinar-salesforce-data-dictionary-build-it-yourself-or-automate-it) - [![Webinar: Top 3 Signs You Need a Modern Salesforce Data Dictionary](https://www.arovy.com/hs-fs/hubfs/Top%203%20Signs%20data%20dictionary%20webinar-1.webp?width=960&name=Top%203%20Signs%20data%20dictionary%20webinar-1.webp) Webinar: Top 3 Signs You Need a Modern Salesforce Data Dictionary Join BambooHR and Arovy to learn the top 3 signs your team needs a modern Salesforce data dictionary to improve visibility, reduce risk, and support AI initiatives.](https://www.arovy.com/resources/webinars/top-3-signs-you-need-a-modern-salesforce-data-dictionary) - Company [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.svg) Company Page Learn about Arovy.](https://www.arovy.com/company) [![Security/Compliance Icon](https://www.arovy.com/hubfs/Facebook%20Icon%20(13).webp) Security/Compliance A foundation of trust for every customer.](https://www.arovy.com/trust-center) [![Community Icon](https://www.arovy.com/hubfs/Cal.webp) Community Join the WizOps Community.](https://wizops.org/?__hstc=24482917.e5b55d6fa1b1ae884b668cdcd6e03155.1745874937734.1747330601180.1747335269272.48&__hssc=24482917.6.1747335269272&__hsfp=3161940081) Recent Resources - [![Sonar is now Arovy! New Name. Bigger Mission. Same Commitment.](https://www.arovy.com/hs-fs/hubfs/arovy%20blog.webp?width=960&name=arovy%20blog.webp) Sonar is now Arovy! New Name. Bigger Mission. Same Commitment. Sonar is now Arovy. We've expanded our mission, helping Salesforce teams govern data, cut tech debt & reduce risk — while keeping the same trusted commitment.](https://www.arovy.com/resources/blog/sonar-is-now-arovy) - [![The Power of a Data Dictionary in the Agentforce Era](https://www.arovy.com/hs-fs/hubfs/The%20Power%20of%20a%20Data%20Dictionary%20in%20the%20Agentforce%20Era-2.webp?width=960&name=The%20Power%20of%20a%20Data%20Dictionary%20in%20the%20Agentforce%20Era-2.webp) The Power of a Data Dictionary in the Agentforce Era Discover why a real-time data dictionary is essential for Salesforce teams in the Agentforce era. Prevent AI risks, ensure compliance, and optimize data governance.](https://www.arovy.com/resources/blog/the-power-of-a-data-dictionary-in-the-agentforce-era) - [Contact](https://www.arovy.com/contact) - [Login](https://app.seesonar.com/?_ga=2.107586177.2061971783.1595815103-1960554115.1586437671) Product Features [![Data Dictionary](https://www.arovy.com/hubfs/Facebook%20Icon%20(8).webp) Data Dictionary AI-Powered Salesforce Data Documentation](https://www.arovy.com/data-dictionary)[![Impact Analysis and Dependency Mapping](https://www.arovy.com/hubfs/Impact%20Analysis%20and%20Dependency%20Mapping.png) Impact Analysis and Dependency Mapping Seamless visibility into all references across your organization.](https://www.arovy.com/impact-analysis-dependency-mapping)[![Change Tracking & Enhanced Audit Trail](https://www.arovy.com/hubfs/Facebook%20Icon%20(7).webp) Change Tracking & Enhanced Audit Trail Use a timeline view to track changes made across teams.](https://www.arovy.com/change-tracking-enhanced-audit-trail)[![Data Classification](https://www.arovy.com/hubfs/Facebook%20Icon%20(9).webp) Data Classification Ensure compliance with capture for every field added.](https://www.arovy.com/data-classification)[![Application Security Monitoring](https://www.arovy.com/hubfs/Facebook%20Icon%20(10).webp) Application Security Monitoring Keep a pulse on every integration and user.](https://www.arovy.com/application-security-monitoring)[![API Monitoring & System Uptime](https://www.arovy.com/hubfs/Facebook%20Icon%20(11).webp) API Monitoring & System Uptime Seamlessly detect every integration outage.](https://www.arovy.com/api-monitoring-system-uptime)[![Threat Detection & Risk Mitigation ](https://www.arovy.com/hubfs/Facebook%20Icon%20(12).webp) Threat Detection & Risk Mitigation Visual threat-detection and suggested action plans.](https://www.arovy.com/threat-detection-risk-mitigation) We Help You [![Target Icon-1](https://www.arovy.com/hubfs/Target%20Icon-1.webp) Scope Salesforce Projects Confidently Understand impacts across Salesforce and your integrated tech stack.](https://www.arovy.com/solutions/scope-sfdc-projects/)[![Data Base Icon](https://www.arovy.com/hubfs/Data%20Base%20Icon.webp) Eliminate Tech Debt with AI Insights into every piece of data and configuration.](https://www.arovy.com/solutions/eliminate-tech-debt)[![Map point icons](https://www.arovy.com/hubfs/Map%20point%20icons.webp) Monitor Setup Audit Trail Automated access audits with Arovy.](https://www.arovy.com/solutions/monitor-setup-audit-trail)[![Shine Icon](https://www.arovy.com/hubfs/Shine%20Icon.webp) Reduce Agentforce Risk with AI Ensure the accuracy and usefulness of AI models.](https://www.arovy.com/solutions/reduce-agentforce-risk-with-ai)[![User Icon](https://www.arovy.com/hubfs/User%20Icon.webp) Automate User Profile Management Protect data and stay compliant with user access policies.](https://www.arovy.com/solutions/automate-user-profile-management)[![Shield Icon](https://www.arovy.com/hubfs/Shield%20Icon.webp) Optimize Shield Implementation Visualize Salesforce activity to spot anomalies and prevent leaks.](https://www.arovy.com/solutions/salesforce-shield)[![Process Icon](https://www.arovy.com/hubfs/Process%20Icon.webp) Visualize Connected Apps Get real-time visibility into apps accessing your Salesforce data.](https://www.arovy.com/solutions/visualize-connected-apps-to-reduce-integration-risk)[![icon](https://www.arovy.com/hubfs/Danger%20Icon-1.png) Stop Salesforce Phishing Attacks Block unauthorized Salesforce integrations without disrupting your business.](https://www.arovy.com/stop-salesforce-phishing-attacks) More From Arovy [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.webp) Blog Read the Arovy Blog](https://www.arovy.com/resources/blog) [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.webp) Webinars Watch the Latest Webinar](https://www.arovy.com/resources/webinars) Follow Us [![LinkedIn Icon](https://www.arovy.com/hubfs/LinkedIn%20Icon.svg)](https://www.linkedin.com/company/sonarsoftware.com?__hstc=24482917.e5b55d6fa1b1ae884b668cdcd6e03155.1745874937734.1746634187535.1746643628231.21&__hssc=24482917.1.1746643628231&__hsfp=3161940081) [![YouTube Icon](https://www.arovy.com/hubfs/YouTube%20Icon.svg)](https://www.youtube.com/channel/UCQwhXnb9tcw07SK78qnxiJw) Latest Resources - [![Webinar: Salesforce Data Dictionary: Build It Yourself or Automate It?](https://www.arovy.com/hs-fs/hubfs/Webinar_3%20Speakers%20(2)-2.jpg?width=960&name=Webinar_3%20Speakers%20(2)-2.jpg) Webinar: Salesforce Data Dictionary: Build It Yourself or Automate It? Join Arovy to learn how to build and maintain a Salesforce data dictionary, where LLMs can help, and when an automated approach makes more sense.](https://www.arovy.com/resources/webinars/webinar-salesforce-data-dictionary-build-it-yourself-or-automate-it) - [![Webinar: Top 3 Signs You Need a Modern Salesforce Data Dictionary](https://www.arovy.com/hs-fs/hubfs/Top%203%20Signs%20data%20dictionary%20webinar-1.webp?width=960&name=Top%203%20Signs%20data%20dictionary%20webinar-1.webp) Webinar: Top 3 Signs You Need a Modern Salesforce Data Dictionary Join BambooHR and Arovy to learn the top 3 signs your team needs a modern Salesforce data dictionary to improve visibility, reduce risk, and support AI initiatives.](https://www.arovy.com/resources/webinars/top-3-signs-you-need-a-modern-salesforce-data-dictionary) Book a Demo [Help & Support](https://sonarsoftware.zendesk.com/hc/en-us/) [Get in Touch](https://www.arovy.com/contact) More From Arovy [![Arovy Icon](https://www.arovy.com/hubfs/Arovy%20Icon.svg) Company Page Learn about Arovy.](https://www.arovy.com/company) [![Security/Compliance Icon](https://www.arovy.com/hubfs/Facebook%20Icon%20(13).webp) Security/Compliance A foundation of trust for every customer.](https://www.arovy.com/trust-center) [![Community Icon](https://www.arovy.com/hubfs/Cal.webp) Community Join the WizOps Community.](https://wizops.org/?__hstc=24482917.e5b55d6fa1b1ae884b668cdcd6e03155.1745874937734.1747330601180.1747335269272.48&__hssc=24482917.6.1747335269272&__hsfp=3161940081) Recent Resources - [![Sonar is now Arovy! New Name. Bigger Mission. Same Commitment.](https://www.arovy.com/hs-fs/hubfs/arovy%20blog.webp?width=960&name=arovy%20blog.webp) Sonar is now Arovy! New Name. Bigger Mission. Same Commitment. Sonar is now Arovy. We've expanded our mission, helping Salesforce teams govern data, cut tech debt & reduce risk — while keeping the same trusted commitment.](https://www.arovy.com/resources/blog/sonar-is-now-arovy) - [![The Power of a Data Dictionary in the Agentforce Era](https://www.arovy.com/hs-fs/hubfs/The%20Power%20of%20a%20Data%20Dictionary%20in%20the%20Agentforce%20Era-2.webp?width=960&name=The%20Power%20of%20a%20Data%20Dictionary%20in%20the%20Agentforce%20Era-2.webp) The Power of a Data Dictionary in the Agentforce Era Discover why a real-time data dictionary is essential for Salesforce teams in the Agentforce era. Prevent AI risks, ensure compliance, and optimize data governance.](https://www.arovy.com/resources/blog/the-power-of-a-data-dictionary-in-the-agentforce-era) [All Posts](https://www.arovy.com/resources) [Salesforce Ops](https://www.arovy.com/resources/blog/tag/salesforce-ops) [InfoSec](https://www.arovy.com/resources/blog/tag/infosec) [Business Systems](https://www.arovy.com/resources/blog/tag/business-systems) [General](https://www.arovy.com/resources/blog/tag/general) 5 MIN READ # UNC6040: Salesforce Voice Phishing (Vishing) Attacks: What You Need to Know ![UNC6040: Salesforce Voice Phishing (Vishing) Attacks: What You Need to Know](https://www.arovy.com/hubfs/Untitled%20design%20(2)-3.png) Link copied to clipboard! ## Introduction Yesterday’s news of the UNC6040 phishing (vishing) campaign targeting Salesforce users has sent shockwaves across industries. Your Salesforce environment, housing invaluable customer data and business intelligence, has never been more attractive to bad actors. This incident serves as a stark reminder: proactive Salesforce security isn’t a luxury; it’s an absolute necessity. The average business has 57 connected applications. With that many integrations, it only takes one overlooked vulnerability for attackers to gain a foothold.   --- ## What Happened? A sophisticated hacking group known as UNC6040 targeted Salesforce customers in a highly coordinated phishing campaign—specifically vishing (voice phishing): - Attackers posed as IT support over the phone, calling employees at 20+ enterprise organizations across the U.S. and Europe. - They tricked victims into installing a modified version of Salesforce’s Data Loader that siphoned off sensitive data. - Employees were also coaxed into OAuth authentication, including MFA, through Salesforce’s connected apps setup. - Once inside, attackers exfiltrated CRM data, later sold with the help of data brokers like ShinyHunters. [Salesforce emphasized](https://www.salesforce.com/blog/protect-against-social-engineering/) the “shared responsibility” security model and issued guidance to help customers better protect themselves. For more detailed reporting on this breach, see [Google’s Threat Intelligence Blog](https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion), [The Register’s Coverage](https://www.theregister.com/2025/06/04/fake_it_support_calls_hit/), and [SalesforceBen’s incident analysis post.](https://www.salesforceben.com/salesforce-app-hijacked-by-hackers-google-reveals-data-exfiltration-exploit/)   --- ## What You Should Do Today ##### **1. Audit Connected Apps & User Permissions** Identify any unapproved or suspicious connected apps and deactivate them immediately. Revoke all access tokens, and reach out to authenticated users and verify that each integration is legitimate. ##### **2. Enforce MFA** Even though the attackers bypassed MFA, both Salesforce and Google still recommend enabling MFA everywhere—every additional layer of friction helps. ##### **3. Ensure Least-Privilege Access** Review user profiles and permissions to ensure no one has more access than necessary. Limit high-risk permissions, such as “Manage Connected Apps” or “Customize Application” to a small group of trusted administrators. Yes, this will generate more ticket requests and overhead, but it dramatically reduces the blast radius if credentials or access has been compromised.   [![stop salesforce attacks2](https://www.arovy.com/hs-fs/hubfs/stop%20salesforce%20attacks2.png?width=1200&height=375&name=stop%20salesforce%20attacks2.png)](https://www.arovy.com/stop-salesforce-phishing-attacks) --- ## What You Should Consider Next ##### **1. IP-Based Restrictions:** Restricting login access to a whitelist of trusted IPs is one of the most effective countermeasures, but it comes with operational challenges.  If you have remote teams or multiple offices without a VPN, maintaining an accurate IP allowlist can become a full-time job. Third-party vendors will need to supply static IP addresses and reauthenticate under this new policy. While it’s the most secure option, it may not be practical for every organization. ##### **2. Integration Users** Use dedicated “integration user” accounts for applications that need API access. This limits the threat surface compared to shared admin credentials.  Keep in mind that some integrations still require individual licensed users (e.g., to track record modifications), so make sure you have a clear inventory of which apps truly benefit from shared integration credentials. ##### **3. Salesforce Shield & Event Monitoring** We’re huge fans of Salesforce Shield, specifically everything in the Event Monitoring. Although it doesn’t offer everything you need to ensure protection, this product offers a lot of infrastructure to create robust and ongoing monitoring solutions for your Salesforce instance. It’s not cheap, but compared to the cost of a data breach, both in dollars and reputation, it’s a wise investment. --- ## How Arovy Would Have Prevented This Attack At Arovy, we understand the sophistication of modern threats. While the details of the UNC6040 attack are still emerging, the patterns of such attacks – often involving credential theft, unauthorized access, and data exfiltration – are precisely what Arovy is engineered to prevent. ### **Three key detection points:** ##### **1. New Application Monitor** - - Any new connected app that suddenly appears, or an existing app requesting expanded scopes, is [detected and triggers an alert.](https://www.arovy.com/application-security-monitoring) Arovy can also automatically block unapproved applications. - In this case, the malicious Data Loader would have been flagged the moment it tried to register as a connected app. ##### **2. New User Monitor** - - Unexpected user authentications, especially OAuth logins from non-standard IP addresses, generate real-time alerts. ##### **3. Event Monitoring** - - Since Arovy ingests Salesforce Shield events, it would spot irregular data-exfiltration patterns (e.g., hundreds of records being mass-exported by a Data Loader instance). - Correlating these anomalies with the connected-app alerts would provide a clear signal that an active data theft was underway. ### **Protection Available Across All Arovy Product Tiers** These capabilities are included across all of our product tiers. With over 300+ Salesforce customers’ environments analyzed, we've seen the average customer integrate 57 apps. --- ## Final Thoughts The UNC6040 attack is a wake-up call. Relying solely on Salesforce’s native security features or taking a reactive approach isn’t enough anymore. You need a dedicated, proactive security solution. Solutions like Arovy are purpose-built to address the unique risks facing Salesforce environments—through continuous monitoring, intelligent alerting, and real-time threat mitigation. Stay vigilant. Audit your connected apps, tighten permissions, consider IP restrictions where feasible, and invest in ongoing monitoring. And if you haven’t done so already, take a look at how [Arovy’s New Application Monitor, New User Monitor, and Event Monitoring capabilities](https://www.arovy.com/application-security-monitoring) can give you continuous, automated protection. **Let’s work together to keep your Salesforce data safe.** ## Stop Salesforce Attacks Arovy is the only solution that blocks unauthorized Salesforce integrations. Learn how Arovy shuts down these types of attacks: Get Demo ![https://6636061.fs1.hubspotusercontent-na1.net/hubfs/6636061/Background.webp](https://www.arovy.com/hubfs/Background.webp) ## Related Posts Explore our recent articles. ![](https://www.arovy.com/hubfs/Imported_Blog_Media/Images-for-Blog-Social-Search-15-May-16-2025-03-17-37-8017-PM.png) ### Maximizing Your Salesforce Shield Investment: Turning Event Monitoring Data into Proactive Business Solutions Prevent data loss in Salesforce using Arovy, which complements Salesforce Shield's event monitoring... Salesforce Ops ![](https://www.arovy.com/hubfs/hero%20image%20-%20Complete%20Guide%20to%20Salesforce%20Data%20Encryption%20How%20to%20Protect%20Your%20Sensitive%20Data.png) ### A Complete Guide to Salesforce Data Encryption: How to Protect Your Sensitive Data Learn the essentials of Salesforce data encryption, its strengths and weaknesses, and how when... Salesforce Ops InfoSec ![Footer background gradient](https://www.arovy.com/hubfs/raw_assets/public/Sonar%202025/images/footer/background--footer-new.png) ![Footer background gradient](https://www.arovy.com/hubfs/raw_assets/public/Sonar%202025/images/footer/background--footer-new__mobile-min.png) ![arovy-logo-blue](https://www.arovy.com/hubfs/arovy-logo-blue.png) The Modern Salesforce Data Governance Platform for AI Success free trial book demo Product Features [Impact Analysis & Dependency Mapping](https://www.arovy.com/impact-analysis-dependency-mapping)[Change Tracking & Enhanced Audit Trail](https://www.arovy.com/change-tracking-enhanced-audit-trail)[Data Dictionary](https://www.arovy.com/data-dictionary)[Data Classification](https://www.arovy.com/data-classification)[Application Security Monitoring](https://www.arovy.com/application-security-monitoring)[API Monitoring & System Uptime](https://www.arovy.com/api-monitoring-system-uptime)[Threat Detection & Risk Mitigation](https://www.arovy.com/threat-detection-risk-mitigation)[See All Features](https://www.arovy.com/product) Solutions [Scope Salesforce Projects Confidently](https://www.arovy.com/solutions/scope-sfdc-projects/)[Eliminate Tech Debt with AI](https://www.arovy.com/solutions/eliminate-tech-debt)[Monitor Setup Audit Trail](https://www.arovy.com/solutions/monitor-setup-audit-trail)[Reduce Agentforce Risk with AI](https://www.arovy.com/solutions/reduce-agentforce-risk-with-ai)[Automate User Profile Management](https://www.arovy.com/solutions/automate-user-profile-management)[Optimize Shield Implementation](https://www.arovy.com/solutions/salesforce-shield)[Visualize Connected Apps](https://www.arovy.com/solutions/visualize-connected-apps-to-reduce-integration-risk)[Stop Salesforce Phishing Attacks](https://www.arovy.com/stop-salesforce-phishing-attacks) Resources [Blog](https://www.arovy.com/resources/blog)[Webinars](https://www.arovy.com/resources/webinars) Company [Company Page](https://www.arovy.com/company)[Trust Center](https://www.arovy.com/trust-center)[WizOps Community](https://wizops.org/) Social [YouTube](https://www.youtube.com/channel/UCQwhXnb9tcw07SK78qnxiJw)[LinkedIn](https://www.linkedin.com/company/sonarsoftware.com?__hstc=24482917.e5b55d6fa1b1ae884b668cdcd6e03155.1745874937734.1746634187535.1746643628231.21&__hssc=24482917.1.1746643628231&__hsfp=3161940081) Contact [Book a Demo](https://www.arovy.com/request-demo)[Help & Support](https://sonarsoftware.zendesk.com/hc/en-us/)[Get in Touch](https://www.arovy.com/contact) © 2026 Arovy All rights reserved. | [Privacy Policy](https://www.arovy.com/privacy-policy) - [Terms of Service](https://www.arovy.com/terms-of-service) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jack Mcglinchey", "url" : "https://www.arovy.com/resources/blog/author/jack-mcglinchey" }, "dateModified" : "2025-08-04T18:28:26.213Z", "datePublished" : "2025-06-05T22:48:02.000Z", "headline" : "UNC6040: Salesforce Voice Phishing (Vishing) Attacks: What You Need to Know", "image" : [ "https://www.arovy.com/hubfs/Untitled%20design%20(2)-3.png" ], "mainEntityOfPage" : { "@id" : "https://www.arovy.com/resources/blog/unc6040-salesforce-voice-phishing-vishing-attacks-how-arovy-helps", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.arovy.com/hubfs/logo%20arovy400x400.svg" }, "name" : "Arovy" } } ``` ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "caption" : { "@type" : "MediaObject", "contentUrl" : "https://www.arovy.com/media-transcripts/191217481624/en.vtt", "inLanguage" : "en", "name" : "en Captions" }, "contentUrl" : "https://stream.mux.com/uhUbMcozBcT011Dc01Nb01CoTyHXoTG8xpBK2mFQJ006ZZg/capped-1080p.mp4", "dateModified" : "2025-09-22T12:27:10.830Z", "duration" : "PT5M20.26S", "height" : 1080, "name" : "Copy of unc6040 - zoom recording (Video)", "thumbnailUrl" : "https://6636061.fs1.hubspotusercontent-na1.net/hubfs/6636061/Copy%20of%20unc6040%20-%20zoom%20recording%20(Video).mp4/medium.jpg", "uploadDate" : "2025-06-10T16:15:48.706Z", "width" : 1920 } ```