Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique
Microsoft Threat Intelligence has detailed new phishing and malware delivery activity from Star Blizzard, a Russian state threat group. The group, also known as Callisto Group and SEABORGIUM, is associated with Centre 18 of Russia’s Federal Security Service, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Since January 2026, Microsoft has identified at least 13 large-scale phishing campaigns targeting organizations worldwide. The activity affected more than 100 organizations, primarily in the United States and the United Kingdom.
The targets include Ukrainian individuals, government agencies, NGOs, and think tanks focused on international policy. The newer campaigns use a broader phishing approach, though the group still uses some previously reported techniques.
To send phishing emails at a larger scale, Star Blizzard created accounts on compromised websites running WordPressor cPanel. Microsoft assesses with high confidence that the group compromised these sites for this purpose. The group previously relied mainly...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
