Ransomware Group intelligence
Helix
ActiveTrack Helix with 10 published victims and 3 known leak locations in a single intelligence view.
Overview
Helix is tracked by Breach House as a ransomware group with 10 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion |
| Leak location 2 | Onion service | Unknown | helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd.onion |
| Leak location 3 | Web location | Unknown | helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd.onion/leaks |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (10)
Search, filter and paginate the victim timeline for Helix. Showing 1–10 of 10.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Venture Logistics id31404 View details | United States | Transportation / Travel / Logistics | ||
|
Venture Logistics is a US-based company operating in the transportation, travel, and logistics sector, providing various services to facilitate the movement of goods. The company's offerings cater to the needs of its clients across the United States. Venture Logistics was listed as a ransomware victim associated with Helix. |
|||||
| Ransomware | Venture Logistics id31404 View details | United States | Transportation / Travel / Logistics | ||
|
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0. |
|||||
| Ransomware | Uber id31405 View details | United States | Transportation / Travel / Logistics | ||
|
Uber Freight is a logistics and transportation company based in the United States, offering a range of services to facilitate the movement of goods. The company operates in the transportation and travel sector, providing solutions for shippers and carriers. Uber Freight is listed as a ransomware victim associated with Helix |
|||||
| Ransomware | Uber id31405 View details | United States | Transportation / Travel / Logistics | ||
|
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0. |
|||||
| Ransomware | Highwoods Properties id31406 View details | United States | Construction / Real Estate | ||
|
Highwoods.com is a US-based company operating in the construction and real estate sector, offering various services related to property development and management. The company is involved in the acquisition, development, and management of office and industrial properties. Highwoods.com was listed as a ransomware victim associated with Helix |
|||||
| Ransomware | Highwoods Properties id31406 View details | United States | Construction / Real Estate | ||
|
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0. |
|||||
| Ransomware | Morguard id31407 View details | United States | Construction / Real Estate | ||
|
Morguard is a US-based company operating in the construction and real estate sector, offering various services and solutions. The company is involved in the development, management, and ownership of real estate properties. Morguard was listed as a ransomware victim associated with Helix. |
|||||
| Ransomware | Morguard id31407 View details | United States | Construction / Real Estate | ||
|
Morguard reached out, took extensions, then ignored the negotiation with no real offer. Contacting us and stalling is not a strategy. Deadlines stand. Silence after outreach gets a private board and a countdown then publication. |
|||||
| Ransomware | Westland Insurance id31408 View details | Canada | Finance / Legal / Insurance | ||
|
Westlandinsurance.ca is a Canadian company operating in the finance and insurance sector, providing various insurance services to clients across Canada. As part of the finance and insurance sector, the company plays a crucial role in offering financial protection and risk management solutions. Westlandinsurance.ca was listed as a ransomware victim associated with Helix |
|||||
| Ransomware | Westland Insurance id31408 View details | Canada | Finance / Legal / Insurance | ||
|
Westland reached out, got the full demand, then stalled with no serious number. Contacting us and dragging process is not negotiation. |
|||||