Icarus Extortion Group Steals Salesforce Data via Compromised Klue Tokens22. June 2026CybersecurityStolen OAuth tokens from a compromised Klue integration enabled the Icarus group to gain mass access to Salesforce customer accounts through automated API queries. Share on: