Threat actor
UNC6692
Tracked by CyberSIXT since Apr 23, 2026 · last activity Apr 27, 2026
Coverage timeline
-
UNC6692 hijacks Microsoft Teams and AWS to deploy Snowbelt malwarewww.darkreading.com · Apr 27, 2026
-
Researchers Say Decades Old Lua Malware fast16 Predated Stuxnetthehackernews.com · Apr 27, 2026
-
UNC6692 Fake IT Support Phishing Delivers Snow Malware Extensionwww.securityweek.com · Apr 27, 2026
-
UNC6692 Leverages Teams Impersonation to Deploy Custom Malwarethehackernews.com · Apr 23, 2026
-
UNC6692 Uses Fake Teams Invite to Deploy Snowmalware Suitecloud.google.com · Apr 23, 2026