Russian APT Star Blizzard Expands Targeting, Shifts Tactics to Hit US, UK, Ukraine

Microsoft reports that Russian state-linked hacking group Star Blizzard has expanded its cyberespionage campaign beyond its traditional targets, now hitting US and UK entities and relying on high-volume, low-friction attacks requiring only a single victim interaction. The tactical shift marks a deviation from the group's prior spear-phishing approach, signaling a broader and more aggressive operational tempo. The full scope of compromised victims remains unclear, but the expansion into Western targets elevates the threat to government and critical infrastructure sectors.