Threat actor · G1033

Star Blizzard

Also known as SEABORGIUM, Callisto Group, TA446, COLDRIVER.

Star Blizzard is a cyber espionage and influence group originating in Russia that has been active since at least 2019. Star Blizzard campaigns align closely with Russian state interests and have included persistent phishing and credential theft against academic, defense, government, NGO, and think tank organizations in NATO countries, particularly the US and the UK.

ATT&CK techniques

20 mapped

T1059.007 T1078 T1114.002 T1114.003 T1204.002 T1539 T1550.004 T1566.001 T1583 T1583.001 T1585.001 T1585.002 T1586.002 T1588.002 T1589 T1593 T1598.002 T1598.003 T1608.001 T1684.001