UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware

Source: The Hacker News

Threat Overview

A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts. As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victims to accept a Microsoft Teams chat invitation from an account.