Shared from twixb · bleepingcomputer.com

Threat actor uses Microsoft Teams to deploy new “Snow” malware

bleepingcomputer.com·Apr 25, 2026

A threat group known as UNC6692 is using social engineering tactics via Microsoft Teams to deploy a new malware suite called "Snow," which includes tools for credential theft and domain takeover, ultimately aiming to exfiltrate sensitive data. The attackers utilize "email bombing" to create urgency and trick victims into installing malicious software disguised as a security patch.

The most valuable insight for you is the emergence of a threat group, UNC6692, exploiting Microsoft Teams for social engineering attacks to deploy the "Snow" malware suite. This highlights the critical need for enhanced security awareness training and monitoring of communication platforms to prevent unauthorized access and data breaches within your network.

Powered by twixb

Want more content like this?

twixb tracks your favorite blogs and social media, filters by keywords, and delivers personalized key learnings — straight to your inbox.