SynkLoader is a Python-based loader distributed through Microsoft Teams phishing, presenting as a PowerShell Cleaner. It installs multiple modules including a fake lock screen to steal credentials, a reverse proxy, a RAT, and a VNC module, likely for ransomware or initial access.