⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Bad actors took advantage of the legitimate name and services of Kuse, a popular AI-based app designed for workplaces. The attackers exploited the users’ trust in Kuse to carry out a phishing attack.
A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability
A breach claims the systems as well as the confidence that was, in retrospect.
The calm before the ransom: What you see is not all there is. A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability.
The calm before the ransom: What you see is not all there is. A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability.
Written by: JP Glab, Tufail Ahmed, Josh Kelley, Muhammad Umair Introduction Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to achieve deep network penetration. As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an account outside their organization. The UNC6692 campaign demonstrates an interesting evolution in tactics, particularly the use of social engineering, custom malware, and a malicious browser extension, playing on the victim’s inherent trust in several different enterprise software providers. Threat Details In late December 2025, UNC6692 conducted a large email campaign designed to overwhelm the target with messages, creating a sense of urgency and distraction.