UNC6692 Uses Email Bombing, Social Engineering to Deploy ‘Snow’ Malware - SecurityWeek

A threat actor known as UNC6692 is employing email bombing and social engineering tactics, impersonating IT support to trick victims into executing malicious code. This leads to the deployment of the Snow malware framework, which includes components like Snowbelt, Snowglaze, and Snowbasin, enabling reconnaissance, lateral movement, and credential harvesting.