Dozens of Global Companies Hacked via Cloud Credentials from Infostealer Infections & More at Risk

This report details a large-scale criminal campaign by the actor(s) “Zestix” (alias “Sentap”) who harvest credentials from Infostealer logs and auction access to corporate ShareFile, Nextcloud, and OwnCloud instances across roughly 50 global organizations; exposed data includes PHI, PII, defense/aerospace blueprints, infrastructure schematics, and sensitive corporate legal/financial files. The root cause is repeatedly identified as Infostealer infections on employee devices combined with failure to enforce Multi-Factor Authentication (MFA); Hudson Rock’s Cavalier intelligence is presented as a remediation capability to detect compromised credentials before they are weaponized.