Microsoft says Russian FSB-linked Star Blizzard has expanded from targeted spear-phishing to larger-scale phishing campaigns using the RedFlick delivery method and CosmicPulse backdoor. The activity has hit more than 100 organizations, with a focus on Ukraine, NGOs, think tanks, governments, and supporters of Ukraine in the U.S. and U.K. #StarBlizzard #FSB #RedFlick #CosmicPulse #Ukraine
Keypoints
- Star Blizzard shifted from spear-phishing to larger-scale phishing campaigns.
- RedFlick helps automate campaign execution and expand targeting.
- The campaigns have targeted Ukraine-linked organizations and supporters of Ukraine.
- More than 100 organizations in the U.S. and U.K. have been affected.
- CosmicPulse is deployed through scheduled tasks to help evade detection.
Read More: https://cyberscoop.com/microsoft-star-blizzard-redflick-phishing-campaigns/