kyber.today

daily cyber × ai intelligence

← threat actors

threat actor · RU

Callisto

also tracked as star blizzard 1

1 story · 1 in the wild · September 30, 2026 – September 30, 2026

evidence: 1 attempted

how they got in

  • phishing email 1 · Sep 30

geography

  • russia 1 · Sep 30

malware and tools

  • cosmicpulse 1 · Sep 30

techniques

  • phishing 1 · Sep 30

attack phases seen

  • Execution 1 · Sep 30
  • Initial access 1 · Sep 30

what we reported, newest first, grouped by story

September 30, 2026

  • Star Blizzard has shifted from narrow spear-phishing to large-scale multi-stage campaigns against 100+ organizations, using compromised legitimate websites and a new delivery technique Microsoft calls RedFlick, paired with the CosmicPulse backdoor (Microsoft, The Hacker News). · Sep 30 · attempted · via phishing email · as star blizzard · Threat Activity