New Helix data extortion group uses identity-focused tactics to target SharePoint
Helix initiates contact through vishing, sometimes impersonating managers via caller ID spoofing, to trick targets into device-code phishing schemes for acco...
Data Extortion
Unknown
auto-detected
AI Intelligence Brief cached
Edit Profile
Entity Relationships
Related YARA Rules View all on YARA Rules page →
90-Day Activity
All Articles (4)
Last 90 Days
All Time
New Helix Extortion Group Targets Enterprises With MFA Abuse and SharePoint Exfiltration
A previously unreported data extortion operation dubbed “Helix” that targets enterprises using identity-focused entry techniques and automated SharePoint exf...
US government agency pays $1 million to data extortion group Kairos
The incident, detailed in a case study by Ransom-ISAC, involved Kairos gaining access to a U.S.
U.S. Government Agency Paid $1M to Data Extortion Group Kairos
A U.S.