Russian state hackers use new RedFlick technique to push malware

Russian state-sponsored threat actor Star Blizzard has been observed employing a new malware installation technique called 'RedFlick' to deploy its CosmicPulse backdoor. The RedFlick method represents a novel tactic in the group's evolving offensive toolkit. Star Blizzard, known for sophisticated cyber espionage operations, continues to refine its intrusion methods to evade detection. The CosmicPulse backdoor serves as a signature implant used by the group for persistent access and data exfiltration. This activity highlights ongoing Russian state-sponsored cyber threats targeting presumably government, military, or critical sector organizations. The use of new techniques underscores the group's adaptive capabilities and persistent threat posture.