Threat+Constellation
Live— UTC
← Incidents
INCIDENT 742PhishingLOW / UNDER REVIEWSourced

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique, tracked by Microsoft as “RedFlick”. The post Star Blizzard refines phishing and malware delivery with the RedFlick technique appeared first on Microsoft Security Blog .

Last evidence update
29 SEP 2026 · 15:00 UTC
Source count
1
Status
reported
Observation history

How this record has evolved as evidence accumulated.

30 SEP · 05:22 UTC
Initial report
Evidence