> TritonInfoSec News
Home / Sep 30, 2026 / Story
0
#5 The Hacker News general September 29, 2026 at 17:20 UTC

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

By [email protected] (The Hacker News)

AI Summary

Microsoft attributed a campaign using fake event invitations to Russian state actor Star Blizzard, targeting over 100 organizations tied to Ukraine since January 2026, primarily in the US and UK, with at least one confirmed system compromise. The backdoor delivery mechanism relies on victim interaction with phishing lures impersonating legitimate event invites, demonstrating a shift in tactics toward higher-volume, socially engineered operations. The campaign's confirmed victims span government, NGO, and defense-adjacent organizations.

Read full article → https://thehackernews.com/2026/09/russias-star-bli…

Relevance score: 83.0/100

# More from September 30

  1. 1
    Hackers exploit Citrix NetScaler zero-day to deploy web shells BleepingComputer
  2. 2
    Apple patches CoreGraphics zero-day flaw exploited in attacks BleepingComputer
  3. 3
    New Spectre v2 attack variant leaks Linux root password hash in minutes BleepingComputer
  4. 4
    French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks The Hacker News
  5. 6
    FBI tells ShinyHunters members to turn themselves in after recent arrest BleepingComputer
  6. 7
    Pentagon Personnel Agency Data Breach Impacts 3 Million People SecurityWeek
  7. 8
    JadePuffer agentic AI attacks target Azure, destroy cloud resources BleepingComputer
  8. 9
    Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The Hacker News
  9. 10
    Misconfigured Supabase apps expose data in over 16,000 databases BleepingComputer