Salesforce cloud logo

Published April 16, 2025

Recently, Salesforce reported a new scam in which attackers call people directly, pretending to be IT support. Their goal? To trick you into installing what looks like a helpful app, often claiming to be something like the “Salesforce Data Loader,” but is actually malicious software that gives them access to your Salesforce account and personal data.

This is part of a growing trend. In past years, attackers have used fake Salesforce emails and websites to steal login credentials. Now, they’re shifting tactics—using phone calls to sound more convincing and catch people off guard.

Once installed, these fake apps can steal your username and password, putting your data—and potentially USC’s—at risk.

For more information about this and other recent scams and information security news, check out the Catch of the Week on TrojanSecure.