Cloud file-sharing sites targeted for corporate data theft attacks

Hudson Rock reports that a criminal actor called Zestix has been selling corporate data allegedly stolen from ShareFile, Nextcloud, and ownCloud platforms after infostealer infections (RedLine, Lumma, Vidar) harvested employee credentials; dozens of organizations across critical sectors may be affected and exposed files include sensitive technical, customer, and government documents, with failures such as absent MFA and stale credentials driving the impact.