Star Blizzard Deploys RedFlick Malware Tactic

Russian state actor Star Blizzard is using a new RedFlick technique to install its CosmicPulse backdoor, Microsoft researchers say. Phishing emails deliver a password-protected archive containing a VHDX disk and fake PDF shortcut that triggers an automated infection chain. Since the start of the year, at least 13 campaigns have hit more than 100 organizations, mainly in the United States and United Kingdom.