[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqGUSxvW1hOH3zzaXBj9l54SdGWxprao-CzgrjmcNLqc":3},{"article":4,"iocs":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"34ecee87-3acf-4d16-887b-960bd599aeb5","Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net","russia-s-star-blizzard-ditches-clickfix-to-widen-phishing-net-ec979f","The APT actor is using a new tactic, dubbed \"RedFlick,\" against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.","Russian APT group Star Blizzard has adopted a new phishing tactic called 'RedFlick' to target Ukrainian-linked organizations, including NGOs, think tanks, and journalists. This new approach aims to deploy their CosmicPulse backdoor, marking a shift from their previous ClickFix tool.","Russia's Star Blizzard APT uses new RedFlick tactic for phishing attacks against Ukrainian targets.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fthreat-intelligence\u002Frussia-star-blizzard-apt-ditches-clickfix-widen-phishing-net","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt6f6d60565804fe81\u002F6abcff0189b51bddd40e0d6e\u002Fsnowflakes-Ulrick-T-Alamy.png?width=720&quality=80&disable=upscale","2026-09-30T15:02:25+00:00","2026-09-30T16:00:38.179711+00:00",8,[18,21],{"name":19,"type":20},"Star Blizzard","threat_actor",{"name":22,"type":23},"RedFlick","campaign","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":24,"icon":11,"name":26,"slug":27},"Nation-state","nation-state",[29,31,36],{"category":30},{"id":24,"icon":11,"name":26,"slug":27},{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":35,"value":43,"context":44},"CosmicPulse","Backdoor deployed by Star Blizzard"]