New Phone Scam Targets Workers to Steal Company Data from SharePoint

A new scam group called Helix is targeting workers through phone calls and fake login pages. The attackers call employees pretending to be from their company's IT department or tech support. During these calls, they convince workers to approve login requests or enter codes that give the scammers access to company SharePoint sites where documents and files are stored.

Once inside, they steal sensitive company data and may threaten to release it unless the company pays money. This affects anyone who uses SharePoint at work, especially if your company stores documents, spreadsheets, or sensitive information there. If you work from home or in an office and have access to company SharePoint sites, you are a potential target.

The scammers are particularly focused on tricking people through phone calls combined with realistic looking login pages. They may also abuse multi-factor authentication systems by convincing you to approve login requests during the call.

1. Do not approve any login requests or enter any codes while on the phone.
2. Hang up and call your IT department using a number you find yourself, not one the caller provides.
3. Never share passwords, codes, or approve authentication requests just because someone asks on the phone.
4. Report the suspicious call to your company's security or IT team right away.
5. If you think you may have fallen for this scam, contact your IT department immediately so they can secure your account. Protect yourself from phone scams by following this simple rule: legitimate IT support will never call you unexpectedly and ask you to approve logins or share codes during the call. Treat any unsolicited call asking for account access with suspicion. Always verify by contacting your company through official channels. Teach everyone in your household who works remotely about this threat. Make it a family rule that work accounts are never accessed or modified based on unexpected phone calls, no matter how urgent the caller makes it sound.