In a blog post published Wednesday, Google's Threat Intelligence Group explained how the attackers are using vishing, or voice phishing, to trick employees into granting access to Salesforce records. The goal is to steal large amounts of confidential data in an attempt to extort the victims. Here's how it works.

A hacking group has been impersonating IT personnel to break into companies’ Salesforce tools, using the access for data theft and extortion, according to a new report from Google’s threat intelligence group.

The search giant noted that hackers are targeting English-speaking branches of multinational companies, tricking employees into sharing credentials that grant them access to company data stored on the Salesforce cloud.