Uber Freight reportedly investigating after hacking group claims data breach


A hacking and extortion gang has taken credit for a cyberattack and data breach at Uber Freight, the ridesharing giant’s logistics subsidiary.

A spokesperson for Uber Freight told Reuters, which first reported the incident, that there was no effect on its business operations and that its systems were running normally. (The company did not immediately respond to TechCrunch’s questions about the incident.)

The shipping company is the latest victim in a spate of hacks in recent weeks conducted by the Helix hacking group, which has targeted transportation companies, financial giants, and private equity firms throughout the year. The hackers are known for targeting companies and exfiltrating large amounts of data from their cloud environments, which they then threaten to publish if the victim companies do not pay a ransom.

In a post on its data leak site, which it uses to host the stolen files, the Helix hackers claim to have taken mailboxes, cloud storage drives, files relating to accounts payable, and dispatch documents from Uber Freight.

Some of the files seen by TechCrunch appear to show email correspondence between Uber Freight and several of its customers. TechCrunch could not immediately verify the authenticity of the files, which appeared to be dated around mid-June.

Uber Freight has not yet said if it received any correspondence from the hackers, or if it paid the hackers a ransom. 

Google said earlier this week that the Helix hacking group is part of a wider umbrella collective of hackers that it tracks as UNC6671. The gang relies on social engineering tactics, such as voice phishing, a tactic that involves calling IT helpdesks and requesting the reset of employee passwords. Security researchers have long warned that these attacks, while crude and rudimentary, are highly effective at tricking humans into granting access to sensitive systems.

In its blog post, Google said a review of the gang’s bitcoin wallets shows it has made at least $10.6 million in ransom payments between January and May this year.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.



Source link

  • Related Posts

    Mesh, Automattic’s CRM for everyone, comes to Android

    Mesh, the relationship manager and personal CRM acquired by WordPress.com’s parent company, Automattic, last year, is now available to users on Android devices. The software allows users to privately visualize…

    You Can Now Watch Classic Movies Like The Martian, E.T. And Zodiac On Apple TV

    Apple TV is known for its original series like Ted Lasso, Silo and Severance, but it’s now offering new content it doesn’t often feature: classic films. The streaming service just…

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    You Missed

    Rights museum’s Palestinian exhibit ‘falls short of the facts’: report

    Mesh, Automattic’s CRM for everyone, comes to Android

    Mesh, Automattic’s CRM for everyone, comes to Android

    Henry Cavill’s 2-Hour Action-Movie Masterpiece With a Secret 007 Connection Is Officially Free to Stream

    Henry Cavill’s 2-Hour Action-Movie Masterpiece With a Secret 007 Connection Is Officially Free to Stream

    What the polls missed in Wisconsin’s primary and David Ellison threatens to uproot Paramount: Morning Rundown

    What the polls missed in Wisconsin’s primary and David Ellison threatens to uproot Paramount: Morning Rundown

    Some Ontario wineries say bring back U.S. wines, if it eases tariffs

    Some Ontario wineries say bring back U.S. wines, if it eases tariffs

    You Can Now Watch Classic Movies Like The Martian, E.T. And Zodiac On Apple TV

    You Can Now Watch Classic Movies Like The Martian, E.T. And Zodiac On Apple TV