Lack of MFA Is Common Thread in Vast Cloud Credential Heist

Hudson Rock reports a campaign by a threat actor called "Zestix/Sentap" who leveraged infostealers (e.g., RedLine, Lumma, Vidar) to harvest saved credentials from infected machines and used those credentials to access enterprise file-sharing/collaboration platforms (ShareFile, OwnCloud, Nextcloud) lacking MFA; stolen data from about 50 firms was being auctioned and thousands more organizations are identified as at risk due to exposed credentials in infostealer logs.