Salesforce Threat Landscape 2025 – What We’ve Seen So Far

Detection telemetry from WithSecure Cloud Protection for Salesforce showed a nearly 20 times increase in threat detection rates per million scanned files in Q1 2025. This report presents findings from Q1 2025 detections in Salesforce environments protected by WithSecure. Key attacker tactics include embedding malware in business workflows, abusing QR codes and trusted URLs to craft convincing phishing lures.