DossierENTITY

UNC6692

Coverage of UNC6692 in the Nexus archive.

Earliest in view: Apr 23 · 18:16 UTCMost recent: Apr 27 · 20:12 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYApr 27 · 20:12 UTCDARK READING
UNC6692 Combines Social Engineering, Malware, Cloud Abuse
A new threat actor named UNC6692 is leveraging Microsoft Teams, AWS S3 buckets, and custom 'Snow' malware in a coordinated campaign combining social engineering, malware, and cloud infrastructure abuse.
SECURITYApr 25 · 15:07 UTCBLEEPING COMPUTER
Threat actor uses Microsoft Teams to deploy new “Snow” malware
A threat group named UNC6692 is using social engineering to deploy a new malware suite called 'Snow' through Microsoft Teams. The malware includes a browser extension, a tunneler, and a backdoor.
SECURITYApr 23 · 18:16 UTCTHE HACKER NEWS
UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
A previously undocumented threat group named UNC6692 has been using Microsoft Teams to impersonate IT helpdesk employees and deploy a custom malware suite called SNOW. The attackers trick victims into accepting Teams chat invitations from fake accounts to compromise their systems.