Uber Freight keeps on trucking after extortion crew breaks in

Uber Freight is investigating a data security incident after the Helix extortion group published claims of nearly 1 million stolen files from mailboxes, OneDrive, and other repositories; the company says operations were not disrupted, the incident was contained, and law enforcement was engaged. Researchers link Helix to the UNC6671 cluster (previously BlackFile) and describe attacker techniques including vishing and device-code phishing to capture credentials and siphon cloud data.