LOWData BreachACTIVE
The Hacker News: UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
April 23, 2026
Incident Summary
UNC6692 used impersonation of IT help desk staff via Microsoft Teams to socially engineer users into installing custom malware known as SNOW. The incident centers on misuse of Teams communications rather than a described flaw in the AI service itself. Impact is on users and organizations whose staff were targeted and installed the malware. Limited public details are available about the scope, affected tenants, or remediation status.
Incident Details
- Type
- Data Breach
- Severity
- LOW
- Status
- ACTIVE
- Date Occurred
- April 23, 2026
#hackernews#security#breach