Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

Microsoft warns Russian threat group Star Blizzard is using new RedFlick phishing campaigns and CosmicPulse malware to target over 100 global organizations.

Star Blizzard expands event-invite intrusion campaign

Russia-linked Star Blizzard has targeted more than 100 organizations with fake event invitations designed to deliver a backdoor, extending a familiar social-engineering pattern into a broader cyber-espionage wave. The campaign used spoofed...

Russian Hackers Target 100+ Organizations With New RedFlick Phishing Attack

Russian state-linked hackers have expanded a phishing operation that uses a new RedFlick delivery chain to reach more than 100 organizations. The campaign replaces an obvious malicious attachment with a conversation that looks like ordinary professional correspondence. The activity was recorded in at least 13 campaigns from January through August 2026, chiefly affecting organizations in […]

Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

A group of Russian government hackers is refining its attacks to make it easier to eavesdrop on victims and significantly expand its targets among governments, think tanks and nonprofits around the world, with an emphasis on Ukraine, Microsoft research published Tuesday concludes. The company examined a change in the approach of a group it calls […] Thank you for subscribing to our RSS feed!

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since January, mostly in the U.S. and U.K. At least one computer was infected, but the number of breached