INCIDENT EVIDENCE GRAPH
Open-source private cloud software Nextcloud hacked, site compromised but developer falsely claimed infrastructure issue
#SecurityNews The open-source private cloud software Nextcloud was hacked. The site was compromised but the developer falsely claimed it was an infrastructure architecture issue. This happened yesterday morning, when Nextcloud was redirected to a phishing site. After the anomaly was detected, Nextcloud's main site was taken offline, and the IT team stated it was an infrastructure architecture issue and data was being recovered. It is worth noting that Nextcloud's official website also uses the WordPress system, so it is unknown whether this hack is related to the wp2shell vulnerability. Read the full article: https://ourl.co/114005
- Victim: Nextcloud
- Exploit: wp2shell (unconfirmed connection)
- Method: Website compromise with traffic redirection to phishing site