THREAT OPS › Threat News › [Helix] Uber posted to leak site
[Helix] Uber posted to leak site
Ransomware group: Helix Victim: Uber Victim website: uberfreight.com Sector: Transportation Country: US Discovered: 2026-08-07T07:21:22.132341+00:00 Leak-site post: http://helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion/p/98709deba70bbdf82c24ed60e779c06c8cf8fec574c10403a9c0caff8e5b84df Description: SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix.
MITRE ATT&CK techniques
- SharepointT1213.002
Indicators of compromise
- uberfreight.comdomain
- http://helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion/p/98709deba70bbdf82c24ed60e779c06c8cf8fec574c10403a9c0caff8e5b84dfurl