LOWData BreachACTIVE
The Hacker News: UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
April 23, 2026
Incident Summary
Threat actor UNC6692 used social engineering through Microsoft Teams to impersonate an IT help desk and deploy custom malware known as SNOW onto targeted systems. The incident centers on abuse of Teams communications to gain trust and deliver malware, rather than a confirmed compromise of Microsoft Copilot itself. Impact depends on which organizations were targeted and whether endpoints executed the malware. Limited public details are available about the scope, victims, or remediation status.
Incident Details
- Type
- Data Breach
- Severity
- LOW
- Status
- ACTIVE
- Date Occurred
- April 23, 2026
#hackernews#security#breach