New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA abuse.
The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.