HELIX GROUP TARGETS SHAREPOINT WITH VISHING ATTACKS

A new data-extortion group called Helix is exploiting identity-focused tactics to infiltrate SharePoint environments and steal sensitive data. The group uses voice phishing, device code phishing, and MFA abuse to gain unauthorized access.