Frequency
2
occurrences
First Seen
August 12, 2026
Last Seen
August 13, 2026
Related Threat Clusters
-
City-Forum Campaign Targets Salesforce and ServiceNow Data Exposures
The City-Forum campaign has been actively stealing data from Salesforce and ServiceNow portals since March 2025. Researchers at Reco have identified that the threat actor utilizes custom tools to exploit overly…
7 articles · Updated August 12, 2026
Recent Intelligence Reports
- Mystery attacker spent a year raiding Salesforce and ServiceNow portals — Theregister · August 13, 2026
- "City-Forum" data-theft attacks target Salesforce, ServiceNow portals — Bleepingcomputer · August 12, 2026