Malware
Snow
- First Reported
- Apr 26, 2026
- Latest Reported
- Apr 27, 2026
Reported Context (2)
- UNC6692 used Teams helpâdesk impersonation to deploy the Snow malware suite for credential theft and domain takeover. Weekly Cybersecurity Recap: Fast16, FIRESTARTER, Bitwarden CLI Attack and More
- social engineering and Microsoft Teams helpdesk impersonation to deploy a custom malware suite called “Snow,” which combines a Chrome extension, a tunneler, and a Python backdoor to establish covert persistence and Mandiant Details UNC6692’s Snow Malware and Attack Chain
CVE (3)
Malware (7)
People (1)
Threat Actors (4)
MITRE ATT&CK (17)
Vendors (4)
Products (9)
Tools (4)
Industries (2)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.