Skip to content

CyberSIXT Search

Threat actor · coverage timeline

UNC6692

5 articles from 4 outlets between 23 Apr and 27 Apr. First reported by Google Cloud. The busiest day was Mon 27 Apr, with 3 articles.

Articles: 5; all time · from 4 outlets
Days with coverage: 2; across 5 days
Busiest day: 3; articles on Mon 27 Apr
Last 7 days: 0a day; vs 0 a day before
First report: 23 Apr; Google Cloud
CVEs named: 0; in these articles

Coverage over time

5 articles · 23 Apr – 27 Apr

23 AprFirst report23 Apr · Google Cloud

Show as table

UNC6692: articles per day
Day (UTC)	Articles	Outlets
Thu 23 Apr	2	Google Cloud 1, The Hacker News 1
Mon 27 Apr	3	SecurityWeek 1, The Hacker News 1, Dark Reading 1

Articles

5 articles

Mon 27 Apr3 articles

20:28
UNC6692 hijacks Microsoft Teams and AWS to deploy Snowbelt malwareDark Reading
15:31
Researchers Say Decades Old Lua Malware fast16 Predated StuxnetThe Hacker News
11:01
UNC6692 Fake IT Support Phishing Delivers Snow Malware ExtensionSecurityWeek

Thu 23 Apr2 articles

18:31
UNC6692 Leverages Teams Impersonation to Deploy Custom MalwareThe Hacker News
15:00
UNC6692 Uses Fake Teams Invite to Deploy Snowmalware SuiteGoogle Cloud · first report