Dossier
Snow malware
Coverage of Snow malware in the Nexus archive.
- Crime crew impersonates help desk, abuses Microsoft Teams to steal your data
A previously unknown threat group is using Microsoft Teams chat invitations and helpdesk staff impersonation to deploy custom Snow malware in data-stealing attacks, as reported by Google's Threat Intelligence Group.
- UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
A previously undocumented threat group named UNC6692 has been using Microsoft Teams to impersonate IT helpdesk employees and deploy a custom malware suite called SNOW. The attackers trick victims into accepting Teams chat invitations from fake accounts to compromise their systems.