Infostealers and Lack of MFA Led to Dozens of Major Breaches

Hudson Rock and follow-on reporting attribute dozens of breaches at major global companies to infostealer malware (e.g., RedLine, Lumma, Vidar) that harvested stored credentials which threat actor(s) using the aliases Zestix/Sentap then used to access ShareFile, OwnCloud, and Nextcloud instances lacking multi-factor authentication; stolen credentials were aggregated and auctioned on the dark web, and vendors like ownCloud advise immediate MFA enforcement, password resets, session invalidation, and log review.