Apr 25, 2026mediumransomware

Threat actor uses Microsoft Teams to deploy new “Snow” malware

A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named “Snow,” which includes a browser extension, a tunneler, and a backdoor.

what's affectedThreat actor uses Microsoft Teams to deploy new “Snow” malware

mitigation statusMonitoring updates

first reportedApr 25, 2026

social pulse

mentions (24h)303

velocitytrend flat

mentions delta+1% vs yesterday

platform splitX 65% · Reddit 20% · GitHub 15%

keywords

ransomwarevulnerabilitymitigation

x analyticsheat 0

authors 0verified 0%

likes0

retweets0

replies0

quotes0

summaryDiscussion is steady around exposure checks and mitigation updates.

sources

https://www.bleepingcomputer.com/news/security/threat-actor-uses-microsoft-teams-to-deploy-new-snow-malware/

Curated Apr 25, 2026 by the ahackaday team./Sources verified./Brief grounded in 1 source.

Grace Your AI security internreadyGrace is ready

Grounded in this brief only — Threat actor uses Microsoft Teams to deploy new “Snow” malware. Press ⌘K any time.

You're answering aschange anytime

Pick a playor type your own ↓

Tone

Pick a play above, or type your question

Generate an answer and Grace will return a grounded response for this incident.

scanning advisory feeds…