Hackers abuse modified Salesforce app to steal data, extort companies