Dozens of cloud file-sharing breaches tied to a single threat actor.

Researchers attribute dozens of cloud file-sharing breaches (ShareFile, Nextcloud, OwnCloud) to a threat actor dubbed "Zestix," who harvested credentials from infected machines or logs and is auctioning terabytes of stolen data; Brightspeed is investigating a claimed data theft of over a million customer records by the Crimson Collective; and a ClickFix phishing campaign uses fake BSOD pages to trick hotel staff into installing DCRat malware.