> TritonInfoSec News
Home / Apr 24, 2026 / Story
0
#4 The Hacker News general April 23, 2026 at 18:16 UTC

UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware

By [email protected] (The Hacker News)

AI Summary

The UNC6692 threat group impersonates IT helpdesk staff via Microsoft Teams to deploy SNOW malware, convincing victims to accept chat invitations from fake accounts. This social engineering campaign demonstrates how attackers exploit trusted communication platforms and helpdesk personas to bypass technical security controls.

Read full article → https://thehackernews.com/2026/04/unc6692-imperson…

Relevance score: 85.0/100

# More from April 24

  1. 1
    CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March The Record
  2. 2
    Bitwarden CLI npm package compromised to steal developer credentials BleepingComputer
  3. 3
    New Checkmarx supply-chain breach affects KICS analysis tool BleepingComputer
  4. 5
    UK warns of Chinese hackers using proxy networks to evade detection BleepingComputer
  5. 6
    New GopherWhisper APT group abuses Outlook, Slack, Discord for comms BleepingComputer
  6. 7
    Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case The Hacker News
  7. 8
    CISA orders feds to patch BlueHammer flaw exploited as zero-day BleepingComputer
  8. 9
    Hackers exploit file upload bug in Breeze Cache WordPress plugin BleepingComputer
  9. 10
    US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied CyberScoop