Star Blizzard evolves phishing and malware techniques with RedFlick
Microsoft detects a new technique by the Russian group Star Blizzard to evade security controls through large-scale phishing campaigns.
Starting from January 2026, Microsoft has observed an evolution in the detection evasion capabilities of the Russian state threat group Star Blizzard.
This malicious actor has refined its activities through large-scale phishing campaigns and the use of accounts on compromised websites.
Additionally, the group has introduced a new technique for malware distribution, tracked by Microsoft under the name "RedFlick".