highCyber Attacks
Single Attacker Scrapes Salesforce and ServiceNow Portals Since 2025
Research published by the agent security platform Reco identifies a sustained scraping campaign, dubbed 'City Forum,' targeting Salesforce and ServiceNow customer portals across multiple industries. The activity is traced to a single IP address, 158.220.87.79, with reports indicating the operation has been active since at least 2025. The exact method of access and specific victim data remain under investigation.
The Hacker News1 min read