A new cybercrime group, identified by Google's Threat Intelligence Group, is targeting organizations by impersonating help desk staff on Microsoft Teams. Attackers use social engineering to trick users into clicking malicious links that install custom malware, including a browser extension called SnowBelt. This malware allows them to steal credentials, establish persistence, and gain control over infected systems. AI
Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →
RANK_REASON This describes a specific type of malware and attack vector, which falls under a tool or method rather than a major release or policy change.