THREAT OPS › Threat News › [Helix] Highwoods Properties posted to leak site
[Helix] Highwoods Properties posted to leak site
Ransomware group: Helix Victim: Highwoods Properties Victim website: highwoods.com Sector: Other Country: US Discovered: 2026-08-07T07:20:39.680669+00:00 Leak-site post: http://helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion/p/0194658fe7e20d85cecdfb41e2e7545b5d60ac3a53314ecc52c0e239ac6e912c Description: SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on He
MITRE ATT&CK techniques
- SharepointT1213.002
Indicators of compromise
- highwoods.comdomain
- http://helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion/p/0194658fe7e20d85cecdfb41e2e7545b5d60ac3a53314ecc52c0e239ac6e912curl