
Turla’s Cereal toolset stole Kazakh and Romanian government email
ESET found no external command servers; Romania’s copy was set to collect mail involving the EU and NATO.
8 stories, newest first · one card per story

ESET found no external command servers; Romania’s copy was set to collect mail involving the EU and NATO.

Star Blizzard ran 13 RedFlick phishing campaigns in 2026, deploying CosmicPulse against more than 100 organizations.
FSB-linked Star Blizzard expanded phishing, hitting over 100 organizations with RedFlick and the CosmicPulse backdoor.

Microsoft: FSB-linked Star Blizzard scaled RedFlick phishing to hundreds of emails per campaign, hitting over 100 mostly U.S. and U.K. organizations.

Microsoft says Star Blizzard ran 13 fake-event-invite campaigns since January, hitting 100+ Ukraine-linked organizations with the CosmicPulse backdoor via scheduled tasks.

Microsoft details Star Blizzard's RedFlick technique delivering CosmicPulse backdoor via single-click phishing lures, hitting 100+ organizations supporting Ukraine.
DOJ arrested Oxygen Forensics executives for allegedly hiding Russian ownership while selling software to U.S. agencies.

Swiss prosecutors seek a 12-year sentence for a Ukrainian developer accused in LockerGoga, MegaCortex and Nefilim ransomware attacks causing roughly $160 million in losses.
Today 1.6K readers · 2.4K views · 774 reads · all time 189K views