APT29, UNC6692
Unknown Dormant
- Mentions
- 1
- First seen
- 08 Jun 2026
- Last seen
- 08 Jun 2026
Relevant to you · Relevant
- Threat focus:
- espionage / apt
- Sector / region:
- Manufacturing
Origin
Unattributed
Profile
The threat actor APT29, also known as UNC6692, has been linked to a social engineering campaign via Microsoft Teams. In this campaign, attackers impersonate IT support. The campaign was reported under the headline 'When “Hi, This Is IT” Comes Through Microsoft Teams'. This underscores the use of legitimate communication platforms for deception.
Affected vendors
Microsoft