Known Vulnerability Exploitation

Suspected Chinese-speaking operator drained a Philippine nuclear agency via a 2023 ownCloud bypass

Hunt.io only found the intrusion because the operator left his staging directory browsable on port 8000 in Amsterdam. The scripts inside needed no passwords, just valid usernames and an ownCloud install nobody had updated.