MFA Failure Enables Infostealer Breach At 50 Enterprises

A financially motivated actor dubbed Zestix/Sentap used harvested credentials from infostealer logs (RedLine, Lumma, Vidar) to access cloud file-sharing services lacking MFA, exfiltrating large volumes of sensitive data from dozens of global organizations (including an airline, law firm, healthcare provider and defense contractor) and offering the stolen data for sale, underscoring failures in credential hygiene and session management.