Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net

A Russian APT actor known as Star Blizzard has adopted a new tactic called RedFlick to target Ukrainian-linked organizations, including NGOs, think tanks, and journalists. This tactic is used to deploy the CosmicPulse backdoor. The group had previously used ClickFix, but has apparently shifted its approach. The change in tactic suggests an effort to widen its phishing capabilities. The targets of this campaign include various types of organizations and individuals, such as journalists. The RedFlick tactic is being used to compromise these targets and establish a backdoor presence.