Salesforce warned customers of voice phishing, or "vishing," attacks and of hackers abusing malicious, modified versions of Data Loader in a March 2025 blog post.

Hackers posed as Salesforce IT staff, using vishing to trick employees into installing malicious software for data theft and extortion.