⤷ Title: UNC6692 Uses MS Teams and Cloud Reputations to Hijack Active Directory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 02:02:45 +0000
════════════════════════
⌗ Tags: #Malware #active directory #AWS S3 #Cloud Security #Google Threat Intelligence #infosec #Microsoft Teams #SNOWBASIN #SNOWBELT #SNOWGLAZE #social engineering #UNC6692
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 02:02:45 +0000
════════════════════════
⌗ Tags: #Malware #active directory #AWS S3 #Cloud Security #Google Threat Intelligence #infosec #Microsoft Teams #SNOWBASIN #SNOWBELT #SNOWGLAZE #social engineering #UNC6692
Daily CyberSecurity
UNC6692 Uses MS Teams and Cloud Reputations to Hijack Active Directory
UNC6692 uses MS Teams impersonation to deploy the SNOW suite. Learn how "living off the cloud" bypasses reputation filters to hijack Active Directory.
⤷ Title: The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:34:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser extension malware #Credential Harvesting #Cyber Security 2026 #Email Bombing #Google Threat Intelligence #Mandiant #Microsoft Teams phishing #SnowBasin #SnowBelt #SnowGlaze #Social Engineering #UNC6692
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:34:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser extension malware #Credential Harvesting #Cyber Security 2026 #Email Bombing #Google Threat Intelligence #Mandiant #Microsoft Teams phishing #SnowBasin #SnowBelt #SnowGlaze #Social Engineering #UNC6692
Penetration Testing Tools
The "Snow" Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the assailants