Plan
archived
Star Blizzard deploys CosmicPulse backdoor via new RedFlick technique
- Engineer — Skip
- SOC/IR — Plan: Star Blizzard’s new RedFlick delivery method and CosmicPulse backdoor warrant adding detection coverage this quarter; source the full technical write-up to extract behavioral indicators and map TTPs to ATT&CK before building Sigma/KQL rules.
- Leader — Learn: Star Blizzard (linked to FSB) expanding its tradecraft is useful context for sector-risk assessments, but without evidence of broad enterprise targeting or a named victim in your industry, this does not require immediate leadership action.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.