Ransomware needs a way in. Stolen credentials are the cheapest one.
helix Ransomware Group
Ransomware group profile
24Victims
United StatesSource country
60Impact score
Description
Helix is a cybercrime group that emerged in July 2026, focusing on data extortion through sophisticated identity theft techniques. They utilize techniques such as voice phishing and abuse of Microsoft OAuth to target enterprise environments, specifically SharePoint data repositories, without the need for custom malware. Their operations are financially motivated, relying on stealth and automation to achieve large-scale data theft and extortion.
Key insights
- •Helix combines voice phishing with Microsoft OAuth Device Code Flow abuse to bypass multi-factor authentication.
- •They use two compromised accounts to carry out stealthy data theft and deliver extortion demands later.
- •The group exfiltrates sensitive data from SharePoint Online using automated scripts and shared cloud infrastructure.
- •Extortion demands are communicated through corporate collaboration tools like Microsoft Teams and email.
- •Helix targets high-value Microsoft 365 cloud infrastructures in North America, motivated purely by financial gain.
Threat Level & Status Breakdown
For helix · Based on incidents in selected period
4threat level
Aggressiveness9/ 10
Lethality0/ 10
Criticality2.7/ 10
Status Breakdown
Negotiating8.3%2
Claimed91.7%22
First seenAug 2026
Last seenOct 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 18, 2026
Recent activity
Monthly attack count for helix in the selected period
24Total attacks
9peak in Sep
8avg / month
↓ 1 vs first month
Intelligence
IOCs, YARA/Sigma rules, and related families for helix
- e96325bbb60a04cad182891515c14964dbd873cb9d7625fa5a4d736dc68246d1
- d8be60ff114215bac71a7be4857c81dd72005a1a0c10937431284eb327f19548
- cdf81e591d9cbfb47a7f97a2bcdb70b9
- cd674d6aab60773d6af8554cbc28e902221aeec9b9734c98bb5a1a836c2f166c
- ab20150025af33813865b6388ce12704a18e434be0624ebf84477bbdc6fb2f00
- 2cad7c33a0acc53648dcb44da00fb716
- 57c8edb95df3f0ad4ee2dc2b8cfd4157
- 8e6e3daa8b1eddf230b88334f3d97a9eb3fcddcef164a6005f377abf842d54c9
- 04461a6b8ac0fea7f089d739aee9ed081d9a1fa30c837214ef3cd50e60be0804
- 279ab1e680c954823f6acb12245d77815edb39fa508b81738c11c998358502a9
- d4bee089ae9997667c5ebe728f2e115035f55b148d06000fae035f6ae3ea6cf5
- 55879bf900ac472938df1b3df292792a003376586c491d9e6ef5725dfb79ca90
- 8030e5c7088a2f084dec2da39e65b0e5c9250315ffe34bb409c5065972f0d3f1
- 1204177a34fd956e2bb5317b0f01803cc1bc6ecc513954b9e91640718760235d
- 867434cbf3ad53e9ee2c9d3e28adb15c442b8035333b08a62e99b4f45af229e0
- 859a39512d6d55d16c6e7bc6b7445e7b5b022fefe1696e97d7945d29b8cf5712
- 599b86707d310d834b95337bc6e6fb56f0b177133531fc32bfcd0a45dbe4d5ec
- ec5fdbbc3d1875e94b275817a66c9ddc
- 95e61f016310bf3944d81940d2e08a0cac0b5c1956e84c734d25fd977f7d2047
- aa47802bdf8f0da3f86a4342ba60f48ec07274c725f7d133dbc47acd61a1cb11
- 5f74db9f3fef176d9af3283eee156836
- da0f6ac0b30f8e37e9f0e25b605c3a168c1ff80357d66cd2d25bdf6c80964dc7
- da738753c27f2708bd2257f8cac3385a4ccb0df1341b76acfda07fa980cfb4bd
- d4f6f3f9bf38396dfe3e590650308c81395f9873ae257ae639cb3b63b150bb10
- 529822b0cb358eb166a853ea3fd0103175f7cee6
- bd50f1e65a2dbfdf02a8d6c1b99d30f3b46f887b63d43a5065bf27492d2f52db
- 4daf48805aeee6726cbf9fb4077799b473c907f07e8c5082a0f26d10f5fff1e0
- 8d553c8cd2826aa27496f5ce05063dc8f3654d9eb7a811aaef6cc37cc5532d23
- c00668f9420f77b31a4e85fb31a3fa1104365792f84846bb2d471cef18c28846
- 09c5d30e5ce3380b91cfc710090c7234ba3ee738f0648efe01a8ca8d97a7354e
- 255a65d30841ab4082bd9d0eea79d49c5ee88f56136157d8d6156aef11c12309
- 7abadb6335f958194c51c3f28b4c0b7fe7640a1283cc5e0bb3413c41ffaa1b36
- 85184400bcb3c11dde2c66167289f506d61ec547caeca611e1b3772dc5f6ecaf
- cf1a1c9aee2f973048cdc47eb982a89a85c2dbe64edd3f49d9d0e849c6b50b60
- d905a31374a18a49d4f644cc5a4ad815f7bd53cf940b090795fbcdfe6f728c01
- a5c6d4dbae668479ccb9e50a7e8c3f3bd51efbdfae7ca1d1e079ea618c11631b
- 99bfebefe496e77e02588bc2d9ef42ab31e31971bdee24f5e4cbf74f4b61f63b
- 5aa11ea9fc919725e883e8c2acd81729
- dd766c3b2ca6cbea1905751d5c252c0ee75ac70bafdf24b7ab17e5ff0f92bbfd
- 531585ad2b627330819da1882a14296630a7c3268ef890b66d52aff8554c2fa7
- d3e77cce767e3968f64ef93104c347f9711495cc37569f285e927e572f37ba07
- 531b6ac86ed96cc3656cb5b2f2cb8e6732567a2e6937ec18773890a8a8f48aac
- 63510f745f227ec5c1ae2a289d6267df85517b01
- 6eb0b21b01e6326dc3f062c37d64dfe12181ed7f1b0440b2f472fcaeef10cbd9
- a3508d5b3ecb72d3aee94c26ff32731f57724a87b815e805444133c1e6f33c68
- a6169a237c3f84d7e3d8cb0da93f0f72
- 0ecac11bd830b9223c49d9fc0920199759c6020365ce148e2a121f50d1486fa8
- 7b43dfb9ba1e5802c31bf907fb259e48d88b144f7b19976c511d2fd233df6178
- 0373645a58b8d8c15cee440a36a48315881205cc32f640904f72fd9440c5e8de
- 0f223a27404e1b424cf1172407d22500a4554e62
- ef561fb520e1db20adc7351e4bc599036dc5cd81ebf8e1323c725ae792abc50e
- 3be4a707c52526a2b49b7f7bf7e5d6b05ca9bbcc14df8f84269ccfde526f6365
- cad7535ae2670becf3e09c1f506881c8420f9acf3fbb409449c11304feca0f8e
- deff1c722b5b44b3e2a487a7a05b0e36aada301edc89236f47cf5ded83ed1068
- 14911497193fdde3a1c32191449497286508688b71560c429a2d303c8641edb9
- 2f38120d7880a35c94d837dd60fdf24f4e48f58bd18ec33aa20c4061a61afab2
- bd37c48100636a459f2d761371461fee17cf95fe62c1e8fb241815b705edbd67
- 85ff3b0622c9445e8f4ecce0742f35feea94abb6d112acf963ded83576d3b49b
- 4c59dfd4741da5e2536fc9dd3f794524f992c8a25e492a559f680909ae925759
- 0000f89067d9fbf51cad68aedb0866b1b233056f4b1d704162721aa274ef0d22
- b97b0a8de98b38d2e625935da2482deed5540f4d59ada7af1aab49e17de7c979
- 4a722f839feca819054d205e96a35b3c81d14d5529a915de1d1ed69b0b11752d
- fd23d91e71a07f725a8ebf2711489c9cfecb6cb069b7b06017701c04bb47705f
- 895f83a68dd9e7ad2cfb069ff4728e14fbd955ca67142b1aa822e61bbaf4cb0d
- 4a3947bbf3e6dfc923e557cbef146cbcb622a94ece022ffdc4603e184e76975f
- 9eb7150df095d9bdb5d3e3fbbc2da56616b05b1ea05e37298c251fefdc4804f0
- a9740680f1c75a1b5ceb136f04ab322d3dcec86bb4102e54de16c72cb3970dd5
- 1d1ccb84ca1d928381e59d98fc269812744a3a5d8702810c50a51ed96a00fb0d
- 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610
- bf28d0dc12b2d1628190feb4ffc89947624ba7e3c09ce98e47030257832e55d3
- be7ce2070d1e5e5dc1e2151b5431667161ccf5689db31566a6b49228da2c95fc
- c85365826a758420f6649f0cd58ff7388129888becedb9f1be267dad01e9d18f
- febe0a0f22fda54d5c0a1966eba0bc69
- d4f3f8b96ab909e8e4023a8cff4b0a9090c6f1bd01547521312f204777b62480
- fb58a5ed86d29cadcb4340fef83624f74d95243816f2b6a135cdd35ccfa06830
- 6c5f091983f0c115595f55f8ed05bf072deddbe9ac9f39feb8543490a4f17fc8
- c32bb847daf52117ab93b723d7c57d8b1e75d36b
- 0ace0859f56f8652d2d70a845562caccfe8fca4982b7a980e0d761b05e318c1a
- 8845124578718b2831800bd21aa5c991915e1a27ecf11d5a73cf82595bcf8148
- fa1a376cf8ef9160d6705ad92898c517f03ec75ec5d38db41d563d408400eb86
- fcc59dae37da115e87cc34fb874eddd8e87ce6a2b68eee9784d77153ec525e70
- 00009a9d11a30089a4f5b6f8652f0961f5cce8f83e7bbc0a40a6a8583fa9a2e1
- c83f80684579674b3ab3f6a29db6f20b8fabac9b73be11a02020dc7f2111802e
- 525d014c83ee92554cb6a88685ba822e147f30dbc797a18b6071081a109b7dcb
- 7f40f147334a003be6c79935d3d79d0c0b775e570da4e46cbea01ed422c3e8cf
- 085fc02cd551ba71909b78eb844cda123e172a6c9591345d031cf06b66d2a9e5
- 060eb4ce798e9e2470f4a36139c5c03c0bfacf0a611199b056280efc290f5861
- 9b505ed8c89a4b67e80678af6cc9d4aac4bb07aa44345fee34b8557fe19ba360
- ce1438298244aa9085e47871c40dca4944fddf620ffadbb0a6c9158626556376
- d063af1de32fb062c8aa0bcf3d3eea3a8427f8b3d2d5e9034e3ef3e658a88208
- 442b335e6be332a77b2b39dcbb76a35f44f5b0529c74705d1a292f2e843f314a
- 2a72b2478aa006d7cc256b387fea5f8ec8e44ee7021bc2e42b965235ec27a7f4
- 3e3ab51a2fcc3ae4ca8eff270731c56e0086958a13e26ec42f05094ceb131a44
- d8c5600c09b316689c21aba141044efe25d4cadfd7cab61bfe99269f134f45c2
- b201c3416714ef83053048bf027e7148bad4ab6aaaf53bb35617bac78d566cf5
- 117c603a12e5f79cb8628350d18ee0c2b695844ba4660bb46273aedbfe743e1e
- b89a911f4763c70edcef9350a3467f0cabcd19bd29de9292dc3c7cb37b90d027
- bcc8fa24e6d45c8fb7e30752af27b20fb7b4e081628bbd06e2133d88d68768fa
- 8ac7d2cc1eaf0f33a48fdb21f6e472c2ad823986302b06a60c23eb7878019b65
- a5834cce21fb52cc82ed010abbac0d36
- 531812b315cbcb92b7324b3231f89a1565e94a7f7767cf09b15e3e0fb8b0976e
- 919b61fbd402e085917628db32cfc788
- 2ff45b1cd5d4babba451e01c2f4b87374d480b57195bfb2c461759094f2d5ea1
- 5262e1ee394f329cd1f87ea31ba4a396c4a76edc3a87612a179f81f21606abc8
- 26d3374c884599de14a4b62d455cb5c6b0f02fc6f3f96b0e8b5a9818bd155546
- 5f4a58e352ff85048f935d346852919add5059f3
- 82fc0656bf483f70aa2204fff3e8d1770a5cb1815cbe489a6aea811c353f8f70
- fdc94c1e749430981c45706a2c9289fb6438f6988608ebc9ea047a121a496564
- f4664074641c4756a58ea9d90c05bb6fd3bc860da88e1c6beb3f1a0137f8a7c3
- 9adaf3a844ce0ce36bfed07fa2d7ef66
- 2b0b6359b5513cf55392a1634c4d6d5bf308a8df8efe30db1a70873070dcf957
- 860945d7eafd96fbb0aed60f3283c2aae490b4929dbdd4fb2d286e3c5eb81521
- 481392eaa86a1c2f82c2af420e03fde3a13fa6245a2aef26c1b88b23d1509948
- 3193f3035a4f457d66bab3048880aac2eb8557027f6373e606d4621609af1068
- ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41
- d57bca0b2dd3bf69b4557869f0ff4b7b2a8a1909ed752980a5654a9be6987dfc
- f447e1e3c1a5237245762db0c063c167d71ab8711c65ff113c61eb0980825ace
- 000002869785aa152f0830368c0ae50653ec1f70aadfa665dea26bb201d49fd7
- 00011845a769d1d0130c7a7553cce956e8b2d5a042211e8e54239b80b7f7f696
- 4104cb10ebaac41d788e50208b7fb87e6c20236f8a8df9b2f80ff3e0a714bd8a
- 7ebf8bbae4636d90474ec75f7c5b6f80f9d4913198354d7507ab5e0d4f27ce95
- de446ce75a79cba2b07e8e7c43805a8b44c4230b6c093400c54a6f5b36cb6b72
- 86372ac72add0002b9f8028e3a62410312aa8fe4
- 5b2e2ef030e4eb1c79e0fcba2b6bc6e927de095039419ce7f5437f122f853db1
- c706717c2444f244de74f08762fc349e0eb989584fede0b08704c910198a108d
- d96e8f2d53180c2003f5422cb2691aa28bfe039b
- de124072c0e8cff9ad28489a59b4842f10bdf8d1f9d0639a9156a88ef9aa125a
- a34ac19f4afae63adc5d2f7bc970c07f
- a14653701b3d8c5bd4d0737ff61de5d7f6a31deaf45e68da5906600cf395ea7c
- b30566265962860c6625cc41784d5caa0d4242d5
- bbb617d6c32acabfd0fb6bd2cc7115b5
- 48f5a1d004bc4122536884aa3899e123d85e515877d9512d33b521e7e4188b87
- 641af60cbbfbee8af595780a14f64932087f4f8e580a8cbf6e94361b8c9004c9
- 4c9acf280b47cef7def3fc91a34c7ffe
- f0d05ef225fc62892f326ea4e31c9c429cfa7e241c30719bb2023fb49f867598
- 2d34f21801f94a978bd1d698c4ced73f7099eaeb689decc20c47d019ebfc6999
- 8ac5fddde57785197fcc59a140d585bfeed6e7cb4fb3c2d186b53624a78aea71
- b086999262f19a845dea00eb093725fd8675c1639b61afa9e4aa24674f9e4e94
- 815b7e5f1c6d36304af27db67c02f895
- 34453a2a39c7f4e41e72ba30ea381de027dab5b1076e840a9382502658be490f
- 9ea698e004e978a587fcd72e8f78bc4edb7c43bf6a069f833ff866759fe394dd
- a054c9636851f55c365e3e014e2656e54bedc7d0b0363cb59b0724a7eec2df15
- e542c61ac26e366537d89ad2fbd8c5f448d440b4ff2174d10045c02197aa6bce
- f788d18ee4040e16c3f59a9294ed1140612bf9ef79759a26d21147fa4c5a6adc
- 915deb6fb5559c5feaf1991f13ecda7f42c6fba8c1ceea99b701ed4ae95b8fd1
- b2aa5282fc8b33ef704953a7617c13328a1efaa8077d0e8aa13a20f568f8a5b6
- 478063e4c2696e7b5c75764d420cfc6551f346447561684be0fabbeb25a4bff2
- 76c6c8e44cd4f1dbddc0f6c2202c1480
- bedc585713eeded5f7374113ac4fc28234a6affe02326dd2b386e54040b766e7
- 4cf3c5933ef0e68a812a2a1d84a129851a5058cdb7ddf57fda7451f6eb12a91c
- aff6e69b92e3a1a81c67b3cd288b9f3f
- 1de2536cf63f348ab70e98d939c1fca84dc1b0d5a75fe89e7184c562cbe885aa
- db2b09f6cdba12fb8b96f556cf7e1dff6cf0b612c992db4f59e738ae232ef589
- a45840d902ec2b946bcbaba8efc37a436cde147eb6553611021e07115b96e7b9
- 1ebbb5850ff6435351b774d425c0d345d8bc3024
- 81b732a8b4206fb747bfbfe524dde192
- 9060f8f19d46a256fd2d67d8222956a3d6df427ce77732e0136810df0106a7a5
- 000b64ef70d7daff7d84768db03ff9d8559ad6674e6a8d22e3b00cd77489d244
- fdb297a91f763600375a03109d51bfa9
- e644630c0a7e9d3e5bd96b0d2a776aeb236c57eb60421677ad4b7427a4de7266
- 000085b5c1b3f84134e0147f05964d679aa0aa857099b482e02aff8f4b5677eb
- 422303e6f7b5ae3f961d0cbfdb65ab68986ca84286563c118e7bd99189af48d7
- fff968e5f10d17a873a8fa7f7e5120cca90401a2e87b634030129465b431c78b
- cda85cbb28d7c3c720113e77c26cba601e3c51157a11bd9fd010d966a3fe095a
- 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
- 34598833a0e46280c87ec38f95b5d40b
- 183b3c1976dd1a5e6d3178065a91a2cc1f6eb272eb3ba20fbc0d7d146f637639
- 5ca69232a0da5f45800d756f69c3223aaf41f43cb0c05536fb00053df8e0d820
- 676a8faad523e769187ddd6ee7e616b183b22d5e5f1e23db713d0d5d76243d97
- e554868faed6f5c6fba3f32e38a7ee7b562e8917344884fefe20dd1cbd2537ed
- 00001f6f733937625daa7d5d2448bb933ab4a6ea3f736ae8403fdbb3eef93ab2
- 1045d3cc281b791fbc5071f8bc83aa89d2fe1e1178c4e2fe63de85b6a84ea290
- e552f921f818610bc42690f8cf32bd75c3767251c458001027c08c1f5a7473df
- bc6c535b32bdb75924d1aedcf4b5aa009387d86323da2007ad3f10eb86cf6ee5
- 414c6196439c473ce4459406cd7c546a97e3e951bcd1472c2b0b2f360bc70d4f
- 7f3b0682e57da055874455302178be52481a5161f3f3f805167b248a39b57c18
- 00012ee6016a92793b1fde0b6698076be1c3c13b16b7331e1e860c7128ea3cdf
- 2bec227d3d0873e10463efbfb6bac3a738dcc10220937f11ee3e6eed38887d53
- d988f2518839f336e1e1669c6356dfdfc80772d66fd0c6c6d61c1d9a0a298e9f
- 044541b1513480786e55e3a4f261ac7c5fca1c21ff2151eb6e27046b9a95ec29
- 10370f821ef2d769bcb287b3f5ab081c4949a97891a25a23688e8c553bd393df
- 1c3c329189ba50d722c41bd40f2c2822850c06a82ed9e3ca20e1b8210fc65529
- 000012fd8ee6d4b3a1ea8f07fbf740518a6b96409945d80dbe6abce087e654da
- b35a4319a8b8bab668d4fea8ffc80939fc4a83c83f497e4f0d0b5084d6609655
- 37207f71fc76685875d5de71560b25ea721166cf458c35c6f0fad690eb405617
- f0e5258fc2d1dcc186a99f2e73127a21851d9006fb7a834c0b8275094e53d013
- 5ed2ee5ae38a3c66b66e0dfa8b0f29da6d5921f5dc23c777327600ae9c34a0f4
- 09f772a76c134a2828f6e8e3598e48a61a4f145ccc4e9544f8a3fc5872de526b
- 9b14b644af551ff0e0129f7bdd2222cd53ff1c26dbe9891015080fb562ce4d24
- d5c19326628468c8656da1c46f97840eaebdccbcfb88f9edcdc297ecc253a2cb
- 03eeb994e08f9b003694fc06bc59d4acfd229a414cc9557bb06d675320f11e16
- abd17481c121db94dbab8e10460b4a274f1095359e821aa1ab13aa938f8206e7
- 000cb99c15e0ed813e4ee1d39b75b8a4e4bf72e9ae345d42827693c362a7138c
- 1ecef3db6ebd3ae26ab3655fb3272e75efa42d8e
- 32ec2803f2d1a039d61050b92c3126b5b2014b8138150e876fea9734c2d0b8e3
- 7af2b39c31d107e717c622f51740cf88
- 829e137279f691e493c211108b62c8e15b079bd619ba19ad388450878e0585d0
- e45e4ad9645b1a0c48082be8ec3aef0bdb725c044c3e60b9d7d7b8b6fedcbfa7
- caec460e73bd0403c2bcde7e773459bea9112d1bfacbe413d4f21e51a5762ba6
- 6cc182029c4ee30ebdfd5ebea8b94f00bca494332aee16931986deac08e51dcb
- 61ddf0d5915ecaab536abdcc3cfb5661558bb43f
- 67132766349f94386d2a817c8b0bbf466a0f9326f6a406811d4f80d0c2950fc2
- 7408bcd666fdc1e3aa56b83e4d67a33f3ffb7abd7df2e52fab3519a3377ee749
- 0b17cee6b5969590b94f82d7718782455f5bba75fa137628ec257fc12a4c9895
- 16959716fe4e6f00a3c137387dfc449c0828c2c11c1df9b0a1e624073e29b147
- 252abd7687836d8e86e575823313f968ca8e7020cbbd0513244e929a0124658e
- 7a59ec6c3da318c541e0fc5dd03835e7d585368ea0b5dad669a651adc5ded051
- a56c31949de861f8fd16ad57feac8e90
- 0046714521aa6bf0d54cdd5db108cee9e791ea8bb192939c1ba2eb267ee83add
- ba00205c9ed8bdf97de3bfdbf8965cbc97243976136dffb6156c3bbb44ba9b6e
- a064c7ca1b86a854cf92d60e24ff8c3fd69fbc9a6a41d454a791ba8cba396977
- fe0a37af5ff54980169831eae9f0c07a0ab177762a62f7332bfc93b0d05facae
- c6c952eadca84e3def625c8632ba1a387337903c0140b75585a6ee5aba298c9c
- dfff54d42b60017684805abb5ee34ab2da491dbcdf3a258852cfa439b878d4af
- 0063210f68342d29d770f6762970965f767eeac70f929e3c89edbcf59c802920
- d2bc6f81ddb01c30d5ef973698e25101c11a45be531725c6c21cdfd81e43cff8
- 79d72e1f33e188def9ef4936502ac6e09ff5da4b0aa2910117a66870d178bae7
- dd8ad034f4e91eda33712a8705dc7c96d2b4c69f900d00137396e7ba1fc320be
- 2d8d7dbe7e9dda4557a5c77ac72baf0059436a38b5b1357430b4e02f848d92d2
- f4272104d21c8cc48a6d277f0ad59afd8950bb7fd14b99a063d441ec44fc91c5
- 94694ee7ad6af1c20f9f71df32bb3f7e8323909fd79abfd9d70ccd6f26403c53
- 520934edea97f5cb239a7ff52e33a7e3730ee181ea1c7fd92c01974abccad2b6
- 61e747b226761262a12c99587a3252879dcf72c130c4138ec6939e221002059d
- 1f5210ca940148b8252d5420b804d2568b4bbe11864f0290a77c576277da9857
- a2f0549cca7170ae03ba042464efe62365fba38c20049e439871c9e5ce0f914f
- 95952e224252666f8880a6c7302301739614c48139d7aaa52f5f02cd88de1027
- 4c663636b6f2c911b7766be983ded7aec22082b2a047823d2e4f39a944edc6ef
- a34b24de536a69d46b03c11bcb020573
- 3fd13e9d790fc77e558a37646b381352f2f706eea1880d3e8fa3db0c350b4e11
- 167fff1db7203da539df913e27bbc646f89e580e646040134d50051e52be9fea
- f00395da1c2838b95084d18a8da2d6dbe89ae74b00508e4dafcd65198ba0843c
- e1c99815beb3d2d1a132c26b0dbddcfd3bafab09eae21c2afcf05f3f452d7cfe
- 3efcb5e3a506cd073d2df5f6e4b9f89055f527458ff87c65c4e7317f337ed5da
- 28d0ac0e88f7da5a75d9656159d3d34db48652568b1a33d238b2686adaef7eb6
- 00000075d77e227cdb2d386181e42f42b579eb16403143dc54cd4a3d17fc8622
- 7d35ad1d7f7c71718b6e8f91b50ff126e9fde479b4322449dbaf6c109f58e238
- 0007e286959cc87f737a8f09fb5292a5bec76f2bc50e7986aee47013553ecf60
- 39dccee25237fb8c30f58c5dd17177235525d4cbc4893e1d6b45f94c766d3158
- f7c9d75ccd6abe1514958fede200b744edebcfb68ba822424c8e5b1932a6074e
- 0c22f4c2863fccb0a0d1b3c19f091a9b0a635c31d10bf1667c10c87329783fe4
- d5febfdd239fd1d05e0c29d3bacfb880279f2d19
- a844d62b02a9eefd9d112e74fd660843d91cd8b81dce6ce60a9eaba605fa939c
- 02fd9eac50f48419e9204cd7110fff43c31309afa3d873764c2a998e400185e6
- bf8564b2dad5d2506887f87aee169a0a
- 00005eaf842ea32910a5213742032642392eea77910b03700acbacd00253beb9
- 79cd3587d565afe290076a8d36c31c305a573d18
- 63e81aff36cae2dbd62561ea19e449b1847a8125bb080305f3ab5a6552926461
- d0a6a3eae46cfa214c7ba4785998f1d4
- c27def29d059362fbbe39699cc6f8cea
- 153271cdfa63dfbbc1dd35f2f9c0d7ede6f3b198eee6278b56acdf09915c7afb
- db057d6796337e05812ca2926b5503442f2201c53afb506e90c279e11bf1a7af
- 00007d0e6ca3dfb8f9c61db39ecd056f5e51ff932c3b34a70873f3506e448242
- 97aff05fba57124e746ac214a495cb779681fb5f6cf4f22b5199c28f0c45d90a
- eadeba3c5928c6b9cec369899ee268c624fe36bdcecbcad28deab58c61017a80
- 2ad7b0c3f0ede58c3165b7a8a5479e890a758d39bfe8683eaef50ce6afad7232
- 95740310e96bae4030d77c4f1418146c2e665f55f286fea25949a7e1b930849f
- d1b9de95a928f2455e22381946b406c80ce0a8328451e0d813f0578e16d9ccc2
- fbeb3be87e80cb8e1d2af3d8140796c1bb80c6c7056f60897088ff9e355c3867
- 000024543a821a62870930d803d6d9faf346a6b7b9002799d92cb9ae1095fd0c
- 3b53048fc0719dfdaa4b0517254a3c360d1d3962dc53f8bf684ee498dffc9d43
- 9251d25c3072aac3f1fca27e344ae3c93d4aa367
- 9d9edf87ca203ecc60b246cc783d54218dd0ce77d3a025d0bafc580995a4abd8
- e4e127d7981ba294f095cd35ecaebb1141f446f471c17b40757026ff6f287276
- d923bf3274200c7b2d385b4e03dc932c7b19b5cafab26f0c3a2ea69858e8c02c
- e54fe0f9c8d60b0d595847673195940632de8d52
- 03c8d33d0342d46413ce8b58ff51a8293c19bbc6ee86a47f9c33f364bcc48f8c
- 6188befef10dd799c12c766cfb62453c
- b58a509bdc350148990318ed765604aaca2c66a5da8969aafe0924bccdffc964
- 8f259e96501648886e7f61962efc568e4eb418114e428c715e7f215b4d2fb048
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for helix
Defense Evasion
T1562
Impair Defenses
Execution
T1059
Command and Scripting Interpreter
Impact
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
Lateral Movement
T1021
Remote Services
T1021.001
Remote Desktop Protocol
T1039
Data from Network Shared Drive
Other
T1069
T1069
Persistence
T1078
Valid Accounts
T1547
Boot or Logon Autostart Execution
Victims(16)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| American Campus | United States | Claimed | about 6 hours ago | |
| Southwire | United States | Claimed | 1 day ago | |
| Quikrete | United States | Claimed | 1 day ago | |
| Personify Health | United States | Claimed | 1 day ago | |
| Bay Alarm | United States | Claimed | 1 day ago | |
| Smith Douglas Homes | United States | Claimed | 1 day ago | |
| Rheem Global | United States | Claimed | 1 day ago | |
| Delek US | United States | Claimed | 2 months ago | |
| Morguard | United States | Negotiating | 2 months ago | |
| Kennedy Jenks | United States | Claimed | 2 months ago | |
| Venture Logistics | United States | Claimed | 2 months ago | |
| Westland Insurance | Canada | Negotiating | 2 months ago | |
| AmSpec | United States | Claimed | about 2 months ago | |
| Uber | United States | Claimed | 2 months ago | |
| Delek US Holdings, Inc. | United States | Claimed | 23 days ago | |
| Highwoods Properties | United States | Claimed | 2 months ago |
Affected countries(3)
Countries where this group has been reported to target or leak victims.