Dossier
IT helpdesk
Coverage of IT helpdesk in the Nexus archive.
- UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
A previously undocumented threat group named UNC6692 has been using Microsoft Teams to impersonate IT helpdesk employees and deploy a custom malware suite called SNOW. The attackers trick victims into accepting Teams chat invitations from fake accounts to compromise their systems.