Follow the latest coverage, related explainers and connected technology stories.
Microsoft researchers observed a new delivery technique used by the Russian Star Blizzard group to deploy the CosmicPulse backdoor through phishing messages and malicious shortcut files. The campaigns, which targeted more than 100 organizations, enabled the infection chain to run with minimal victim involvement.
Microsoft observed the Russia-linked Star Blizzard group shifting to broader phishing campaigns and using compromised websites and the RedFlick technique to deploy the CosmicPulse backdoor with less victim interaction. The campaigns targeted more than 100 organizations, including government entities, nongovernmental organizations, and research centers associated with support for Ukraine.