Russian state hackers use new RedFlick technique to push malware

Russian state-sponsored actor Star Blizzard is deploying a novel installation technique called RedFlick to deliver the CosmicPulse backdoor. This tactic employs advanced evasion mechanisms to bypass security controls during the infection stage. IT and security teams should monitor for unauthorized endpoint modifications and anomalous network traffic associated with this campaign.