Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters

The Russian state-backed hacking group Star Blizzard has expanded its phishing operations this year, using a new technique that makes it easier to infect victims with malware.

Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

Russian state-sponsored group Star Blizzard has been using the RedFlick infection technique in recent CosmicPulse attacks.

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale… Read more →