Star Blizzard
Nation-state Russia Dormant
- Mentions
- 5
- First seen
- 29 Sept 2026
- Last seen
- 30 Sept 2026
Relevant to you · Relevant
- Threat focus:
- phishing / becespionage / aptindustrial / ot espionage
- Sector / region:
- Manufacturing
Origin
Russia
Profile
Star Blizzard is a Russian state-sponsored hacking group (APT). The group uses a new technique called RedFlick to distribute malware. It is expanding its targeting to Ukraine and beyond. In recent attacks, over 100 organizations were targeted with fake event invitations to deliver a backdoor.
Affected vendors
Microsoft
Targeted regions
Ukraine and beyond
Targeted countries
Ukraine
Associated malware / tools
Backdoor
Activity (8 weeks)
Recent activity
- Russian state hackers use new RedFlick technique to push malware BleepingComputer
- Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek
- Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond CyberScoop
- Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor The Hacker News
- Star Blizzard refines phishing and malware delivery with the RedFlick technique Microsoft Security Blog