> TritonInfoSec News
Home / Apr 28, 2026 / Story
0
#8 Dark Reading general April 27, 2026 at 20:12 UTC

UNC6692 Combines Social Engineering, Malware, Cloud Abuse

By Alexander Culafi

AI Summary

Newly identified threat actor UNC6692 combines Microsoft Teams social engineering with AWS S3 bucket abuse and custom 'Snow' malware family (Snowbelt, Snowglaze, Snowbasin) in multipronged attacks. The group uses email bombing tactics and impersonates IT help desk workers to gain initial access before deploying their malware toolkit.

Read full article → https://www.darkreading.com/cloud-security/unc6692…

Relevance score: 78.0/100

# More from April 28

  1. 1
    GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions BleepingComputer
  2. 2
    PyPI package with 1.1M monthly downloads hacked to push infostealer BleepingComputer
  3. 3
    Home security giant ADT data breach affects 5.5 million people BleepingComputer
  4. 4
    Medtronic confirms breach after hackers claim 9 million records theft BleepingComputer
  5. 5
    Alleged Silk Typhoon hacker extradited to US for cyberespionage BleepingComputer
  6. 6
    OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years SecurityWeek
  7. 7
    Unpatched 'PhantomRPC' Flaw in Windows Enables Privilege Escalation Dark Reading
  8. 9
    Robinhood account creation flaw abused to send phishing emails BleepingComputer
  9. 10
    Energy and Water Management Firm Itron Hacked SecurityWeek