Google: Salesforce Attacks Stemmed From Third-Party App

A group tracked as UNC6395 engaged in “widespread data theft” via compromised OAuth tokens from a third-party app called Salesloft Drift.