<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Star Blizzard · Threat Recap</title><link>actors/star-blizzard.html</link><description>News mentioning Star Blizzard</description><lastBuildDate>Mon, 19 Oct 2026 15:01:23 GMT</lastBuildDate>
<item><title>Russian state hackers use new RedFlick technique to push malware</title><link>https://www.bleepingcomputer.com/news/security/russian-state-hackers-use-new-redflick-technique-to-push-malware/</link><guid isPermaLink="false">1sicep0</guid><pubDate>Wed, 30 Sep 2026 20:34:01 GMT</pubDate><description>BleepingComputer. The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed &quot;RedFlick&quot; to deploy its signature CosmicPulse backdoor. [...]</description><category>APT</category><category>Malware</category></item>
<item><title>Russia&#39;s Star Blizzard Ditches ClickFix to Widen Phishing Net</title><link>https://www.darkreading.com/threat-intelligence/russia-star-blizzard-apt-ditches-clickfix-widen-phishing-net</link><guid isPermaLink="false">1ly59av</guid><pubDate>Wed, 30 Sep 2026 15:02:25 GMT</pubDate><description>Dark Reading. The APT actor is using a new tactic, dubbed &quot;RedFlick,&quot; against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.</description><category>APT</category><category>Phishing</category><category>Malware</category></item>
<item><title>Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters</title><link>https://therecord.media/russia-hackers-ukraine-blizzard</link><guid isPermaLink="false">1bwklao</guid><pubDate>Wed, 30 Sep 2026 12:00:00 GMT</pubDate><description>The Record. The Russian state-backed hacking group Star Blizzard has expanded its phishing operations this year, using a new technique that makes it easier to infect victims with malware.</description><category>APT</category><category>Phishing</category></item>
<item><title>Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks</title><link>https://www.securityweek.com/russian-apt-star-blizzard-uses-redflick-infection-chain-in-recent-attacks/</link><guid isPermaLink="false">kyoab8</guid><pubDate>Wed, 30 Sep 2026 10:59:30 GMT</pubDate><description>SecurityWeek. The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.</description><category>APT</category></item>
<item><title>Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond</title><link>https://cyberscoop.com/microsoft-star-blizzard-redflick-phishing-campaigns/</link><guid isPermaLink="false">hiiqrs</guid><pubDate>Tue, 29 Sep 2026 20:01:44 GMT</pubDate><description>CyberScoop. Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a single victim interaction.</description><category>APT</category></item>
<item><title>Star Blizzard refines phishing and malware delivery with the RedFlick technique</title><link>https://www.microsoft.com/en-us/security/blog/2026/09/29/star-blizzard-refines-phishing-and-malware-delivery-with-the-redflick-technique/</link><guid isPermaLink="false">xsp006</guid><pubDate>Tue, 29 Sep 2026 15:00:00 GMT</pubDate><description>Microsoft Security Blog. Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique,…</description><category>Research</category><category>APT</category><category>Malware</category><category>Phishing</category><category>Law &amp; policy</category></item>
</channel></rss>
