Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

A security news roundup highlighting multiple active threats and systemic weaknesses: a crime group is impersonating helpdesk staff via Microsoft Teams and deploying custom ‘Snow’ malware to exfiltrate data; CISA/UK partners disclosed a previously unknown ‘Firestarter’ backdoor found on a US federal network; npm supply‑chain worm activity (with overlap to TeamPCP infections) continues to spread; and high‑profile data exposures surfaced (Carnival emails, 500k Biobank records, alleged French ID agency leak). Other notable items include warnings about China‑linked large proxy networks built from/