‘Widespread Data Theft Campaign’ Compromised Many Drift OAuth Tokens, Warn Experts. Threat researchers report that a widespread data theft campaign traces to attackers stealing OAuth access tokens for applications integrated with Salesloft’s AI chatbot Drift, then exfiltrating data. Victims include Salesforce customer Zscaler. Google Workspace instances were also breached.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/salesloft-drift-attacks-exposed-zscaler-customer-data-a-29344
