Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Summary

Threat actors successfully infiltrated the Philippines' Nuclear Power Corporation (NPC) by exploiting an old, unpatched vulnerability in the ownCloud file-sharing system. This allowed them to gain initial access and exfiltrate critical data, including reactor databases, personnel records, and credential stores.

Indicators of Compromise

• malware — commodity

Entities