ownCloud Users Urged to Enable MFA Amid Credential Theft Reports

ownCloud has advised its users to activate multi-factor authentication (MFA) following reports of credential theft that could allow attackers to access sensitive data. The warning comes as a threat actor, Zestix, is reportedly selling stolen corporate data from multiple companies, including ownCloud instances, after gaining initial access through info-stealing malware. The malware is typically distributed via malvertising campaigns or ClickFix attacks.