- Google identifies new threat group, UNC6692, using spam floods and fake IT support messages via Microsoft Teams to trick victims
- Targets were lured to a landing page that harvested credentials and deployed a three‑part malware framework themed around snow
- The toolkit includes a persistence‑focused browser extension, a tunneling tool for data exfiltration, and a backdoor enabling full endpoint takeover
Google has sounded the alarm on a previously undocumented threat actor group that uses cheeky social engineering tactics to deploy a trilogy of malware.
