Discovered a Zeus variant that implements a web-crawling feature to hit Software-as-a-service applications to obtain access to proprietary data or code. The attacks originated from Salesforce.com users, the Zeus variant used implements the web crawling capabilities to grab sensitive business data from the CRM.com. The researchers noted another interesting detail, some of the Zeus parameters were hard-coded, and this suggests that discovered variant was used as a specially crafted tool in a larger attack.”]
Source: https://securityaffairs.co/wordpress/22405/cyber-crime/zeus-hit-saas.html