RedFlick Uses Scheduled Tasks and Password-Protected Archives to Deploy CosmicPulse Backdoor
Star Blizzard ran 13 RedFlick phishing campaigns in 2026, deploying CosmicPulse against more than 100 organizations.
80
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 18, 2026
- Last mentionedSep 30, 2026
Timeline
4 articles · newest firstRussian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks
Microsoft says Russian APT Star Blizzard now delivers backdoors through its RedFlick phishing chain.
76
Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
Microsoft: FSB-linked Star Blizzard scaled RedFlick phishing to hundreds of emails per campaign, hitting over 100 mostly U.S. and U.K. organizations.
68
Ukrainian software developer faces 12 years in Swiss ransomware trial
Swiss prosecutors seek a 12-year sentence for a Ukrainian developer accused in LockerGoga, MegaCortex and Nefilim ransomware attacks causing roughly $160 million in losses.
52
Appears with
- Microsoftorganization · 3
- Star Blizzardthreat actor · 3
- NoroBotmalware · 2
- BaitSwitchmalware · 2
- Microsoftvendor · 2
- CosmicPulsemalware · 2
- Windowsproduct · 1
- NGOsvictim · 1
- RedFlickmalware · 1
- financial institutionsvictim · 1
- MegaCortexproduct · 1
- think tanksvictim · 1
- Nefilimmalware · 1
- YESROBOTmalware · 1
- governmentsvictim · 1
- DarkSwordmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.