Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
Russia's Star Blizzard APT has abandoned ClickFix in favour of a new phishing method called RedFlick, deploying a CosmicPulse backdoor against Ukrainian-linked NGOs, think tanks, and journalists—broadening its target aperture.
Summary written by editorial AI · Source link below
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.
Editorial Analysis
European policy organisations and NGOs collaborating on Ukraine-related topics are within the expanded target set; the tactic shift may bypass defences tuned to ClickFix patterns.
Update phishing simulations and awareness training to include RedFlick-style lures for at-risk staff in policy and communications roles.
Russia-linked Star Blizzard has evolved its phishing tradecraft, expanding targeting to civil-society groups relevant to European policy circles.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Dark Reading in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d