New Malware Attack: Threat Group UNC6692 Unleashes “Snow” via Microsoft Teams
A recent cybersecurity incident has emerged involving a threat group known as UNC6692, which has deployed a sophisticated malware suite named “Snow.” This attack primarily targets organizations through social engineering tactics, tricking users into installing malicious software under the guise of an IT update.
Victims receive urgent messages via Microsoft Teams, posing as IT helpdesk agents, urging them to click a link for a patch to block email spam. Instead, they unknowingly install a dropper that activates a malicious Chrome extension, allowing attackers to gain unauthorized access to sensitive data.
The impact of this attack is significant, as it can lead to credential theft and potential domain takeover, affecting both individuals and organizations. To protect against such threats, users are advised to be cautious of unsolicited messages, avoid clicking on suspicious links, and maintain updated security software.
Risk Level: High
Source: View Original Report
