Helix
New Group | Active
This is an emerging group, so claims should be treated with caution until independently verified.
None
Victims
5
First Discovered
2026-08-07
victim
Last Discovered
2026-08-07
victim
Inactive Since
1
day
Avg Delay
N/A
attack→claim
Infostealer
100.0%
victims with domain
Countries
2
hit
Attack Velocity — Last 12 months
5 victims this month
Known Locations (3)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
HELIX | Yes | 2026-08-08T06:06:23 | helix |
helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd.onion
|
||
|
HELIX - Leaks | Yes | 2026-08-08T06:05:39 | helix |
helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd.onion/leaks
|
||
|
No | 2026-08-08T06:06:45 | nginx |
helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion
|
Target
Top 5 Activity Sectors
- Transportation 2
- Other 1
- Financial Services 1
Top 5 Countries
-
United States
3
-
Canada
1
Heatmap
Indicators of Compromise (IoCs) (1)
Certificate
1
| Type | IOC |
|---|---|
Certificate
|
|
Victims (5)
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by…
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by…
Westland reached out, got the full demand, then stalled with no serious number.
Contacting us and d…