← All reports

Russian state-sponsored actors are using the RedFlick technique to deploy the CosmicPulse backdoor via phishing.

CybersecurityConflictRussiaOct 1, 2026score 0.292 posts · 0 replies across 2 instances
The thread reports that the Russian state-sponsored threat actor Star Blizzard is utilizing a new malware delivery technique called 'RedFlick'. This technique involves phishing emails with password-protected archives to deploy the CosmicPulse backdoor.

Claims

Russian state-sponsored actors are using the RedFlick technique to deploy the CosmicPulse backdoor via phishing.
Parent: CybersecurityEntity: Star BlizzardSub-entity: RedFlick techniqueImpact: negativeDate: Oct 1, 2026Target: RedFlick technique

Source posts

@[email protected]
Russian state hackers use new RedFlick technique to push malware The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed “RedFlick” to deploy its signature CosmicPulse backdoor. https://www.bleepingcomputer.com/news/security/russian-state-hackers-use-new-redflick-technique-to-push-malware/ #backdoor #cyber #cybersecurity #edr #hacker #malware #microsoft #pdf #phishing #redflick #russian #starblizzard #tech #technology #ukraine #windows
4 boosts · 2 favs · 0 replies · Oct 1, 2026
#backdoor#cyber#cybersecurity#edr#hacker#malware
@[email protected]
https://www.bleepingcomputer.com/news/security/russian-state-hackers-use-new-redflick-technique-to-push-malware/ Star Blizzard shifts to RedFlick for lower-friction malware delivery Microsoft says #Russian state actor Star Blizzard is using RedFlick to deploy the CosmicPulse backdoor. The chain starts with phishing emails and a password-protected archive containing a VHDX and disguised LNK. Opening the file launches hidden commands, displays a decoy PDF, installs scheduled tasks
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#russian