Helix, a New Name in the Data Extortion Ecosystem?

Helix is a newly identified data extortion group leveraging sophisticated identity-based attacks—including vishing, device code phishing, and automated SharePoint exfiltration—built on shared infrastructure and tradecraft from the fragmented BlackFile and ShinyHunters ecosystem, signaling a rapidly evolving threat landscape where disabling device code authentication is critical for defense.