If we consider the features for importing data into Salesforce, there are two options. You can either do it via the built-in data import wizard or a third-party data loader.

The Data Loader app itself is real and is used to import, export, or change Salesforce records by connecting to the internal database.

Getting started with Salesforce? Find out which best practices to follow and tools to use to optimize your Salesforce data migration.

Google’s Threat Intelligence Group says a vishing threat called UNC6040 has been targeting Salesforce applications with a fake data loader.

The campaign centers on Salesforce’s Data Loader, a bulk data management tool that lets users import, export, update, delete, or insert large volumes of records within the Salesforce platform.

Salesforce warned customers of voice phishing, or "vishing," attacks and of hackers abusing malicious, modified versions of Data Loader in a March 2025 blog post.