Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Summary

Russian threat actor Star Blizzard has expanded its phishing campaigns to target over 100 organizations using a new malware delivery technique called RedFlick. The technique leverages scheduled tasks to deliver the CosmicPulse backdoor, representing an evolution in the group's attack methodology and demonstrating continued sophistication in their operational capabilities.

Indicators of Compromise

• malware — CosmicPulse
• malware — RedFlick

Entities