Malware
RedFlick
- First Reported
- Sep 29, 2026
- Latest Reported
- Sep 30, 2026
Reported Context (3)
- In attacks observed this year, the APT has been relying on large-scale phishing attacks and a new malware delivery technique dubbed RedFlick, which requires a single user interaction for malware execution. Star Blizzard Uses RedFlick Infection Chain in Recent Attacks
- Microsoft says Russian FSB-linked Star Blizzard has expanded from targeted spear-phishing to larger-scale phishing campaigns using the RedFlick delivery method and CosmicPulse backdoor. Star Blizzard Expands Phishing Campaigns With RedFlick and CosmicPulse
- throughout 2026, combining larger initial-contact campaigns, compromised web infrastructure, and a new RedFlick delivery chain that ultimately deployed the CosmicPulse backdoor. Star Blizzard Expands Phishing Campaigns With RedFlick and CosmicPulse
Malware (3)
Threat Actors (5)
MITRE ATT&CK (11)
Vendors (1)
Products (1)
Industries (10)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.