Hackers allegedly associated with the 'LAPSUS$' group claim to have stolen nearly 1 billion records from Salesforce users, targeting customers through 'vishing' attacks. The group, known as 'Scattered LAPSUS$ Hunters,' reportedly used a modified Salesforce Data Loader tool to extract data, though Salesforce denies any breach of its internal systems. The company is working with affected customers and investigating the extortion claims. A dark web leak site lists around 40 companies as targets, though it's unclear if all are Salesforce users. UK authorities have previously arrested individuals linked to similar attacks, and cybersecurity experts suggest a connection to a broader network known as 'The Com.' Google's security team has observed a shift in cybercriminal tactics towards ransomware and data theft extortion across various industries.