Security NewsMediumIncidentphishing
UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
UnknownApr 23, 2026(11 days ago)
UNC6692 uses Microsoft Teams to impersonate IT helpdesk and deploy malware on compromised hosts.
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts. "As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an account
Potentially Affected Vendors
Microsoft Azure
Vendors are matched automatically based on AI analysis. Verify with official sources.