ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking threat actor exploited a critical vulnerability in ownCloud to steal sensitive nuclear records from a Philippine research body. The attacker used custom Python scripts and open-source tools to gain unauthorized access, exfiltrating data including nuclear-material account records, strategic plans, and employee information. The intrusion was linked to a marine engineering and shipbuilding company providing services to the Philippine Navy, and involved a separate WordPress site compromise leveraging a LiteSpeed Cache plugin vulnerability. The incident highlights a deliberate targeting of Philippine defense-related organizations.