Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor...

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since...

Star Blizzard refines phishing and malware delivery with the RedFlick technique

In this article 1. Star Blizzard TTPs observed in 2026 2. Defending against Star Blizzard and RedFlick-related activity 3. Microsoft Defender detections 4. Hunting queries 5. Indicators of compromise Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their...

Star Blizzard refines phishing and malware delivery with the RedFlick technique

In this article 1. Star Blizzard TTPs observed in 2026 2. Defending against Star Blizzard and RedFlick-related activity 3. Microsoft Defender detections 4. Hunting queries 5. Indicators of compromise Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their...