GoKawiil
UNC6692 Combines Social Engineering, Malware, Cloud Abuse
(darkreading.com)
1.
2.
Threat actor uses Microsoft Teams to deploy new “Snow” malware
(bleepingcomputer.com)