Threat actor uses Microsoft Teams to deploy new “Snow” malware - BleepingComputer

Your Microsoft Teams Chat Isn’t Safe: The 'Snow' Malware Is Here

Most of us trust Microsoft Teams way more than a random email. Unfortunately, hackers know that too.

A new threat called ‘Snow’ malware is spreading through work chats, and it’s surprisingly easy to fall for.

Researchers found a group called UNC6692 using clever tricks to get inside company networks. They don’t just send spam; they act like people you know.

How the 'Snow' Malware Sneaks In

The hackers start by sending a message that looks totally normal. It might be a "file update" or a "helpful link" from a name you recognize.

Since it’s on Teams, most people click without thinking twice. That’s the exact moment the trap springs shut.

These attackers are experts at social engineering. That's just a fancy way of saying they are really good at lying to get what they want.

What’s Inside the ‘Snow’ Toolkit?

Snow isn't just a simple virus. It’s a full-blown hacking kit designed to stay hidden on your computer for as long as possible.

• Fake Browser Extensions: These watch everything you do online, including when you log into your bank.
• Secret Tunnels: This tool creates a private path for hackers to bypass your office firewall.
• Backdoors: This gives the bad guys a permanent "key" to your PC so they can come back whenever they want.

The browser extension is the nastiest part because nobody ever thinks to check them. It can sit there for months, quietly stealing your passwords and company data.

Why Hackers Love Using Teams

Emails are getting blocked by filters all the time these days. But Teams is a bit of a "blind spot" for most security systems.

We’re used to sharing files and links in our work chats every single day. We feel safe there, and that's why it works so well for them.

The hackers might even pretend to be your IT department. They might tell you there’s an "urgent security patch" you need to install immediately.

How to Protect Yourself and Your Team

The best security software in the world can't stop a human from clicking a link. You have to be your own first line of defense.

• Verify the sender: Even if the name looks right, double-check the profile details.
• Ask before clicking: If a link feels "off," send a quick text or call the person to see if they actually sent it.
• Check your extensions: Take two minutes to look at your browser settings and delete anything you don't recognize.
• Use Multi-Factor Authentication (MFA): It’s the best way to keep hackers out, even if they somehow get your password.

Hackers are always finding new ways to trick us. Stay sharp and don't let your guard down just because you're in a "safe" work app.

Have you noticed any strange messages in your Teams chats lately? Let us know in the comments and keep your coworkers safe!