SNOW Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
April 23, 2026
Last Seen
April 25, 2026

Related Threat Clusters

  • Microsoft Teams Exploited for Helpdesk Impersonation Attacks

    Cyber attackers are increasingly using Microsoft Teams to impersonate IT helpdesk staff, employing social engineering tactics to gain remote access to enterprise systems. This method, known as 'cross-tenant helpdesk…

    51 articles · Updated April 20, 2026

Recent Intelligence Reports

  • UNC6692 Deploys SNOW Malware via IT Helpdesk Impersonation on Teams — Technadu · April 25, 2026
  • UNC6692 impersonates help desk employees to drop SNOW malware via Teams — Scworld · April 24, 2026
  • UNC6692 Uses SNOW Malware in Teams Phishing Attacks — Socprime · April 24, 2026
  • UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware — Thehackernews · April 23, 2026

CVSS v3.1 Breakdown