Helix hackers claim breach of Uber Freight logistics data

The hacking collective, identified by Google as part of the broader UNC6671 umbrella, allegedly obtained access to cloud storage, accounts payable records, and internal mailboxes. Files circulating on the group's leak site purportedly contain mid-June email exchanges between the logistics provider and its clients. Uber Freight has declined to clarify whether it has been contacted by the attackers or if a ransom demand was issued.

The Helix group utilizes social engineering, specifically voice phishing, to bypass security by tricking IT helpdesks into resetting employee passwords. This low-tech strategy has proven lucrative; Google security researchers tracking the group's bitcoin wallets estimate the gang extracted at least $10.6 million in ransom payments between January and May alone. The firm's silence on the potential scale of the data exposure leaves the extent of the impact on its customer base unclear.