Star Blizzard Launches Spear-Phishing Campaign Targeting WhatsApp

The Russian nation-state actor known as Star Blizzard has launched a new spear-phishing campaign targeting WhatsApp accounts. In mid-November 2024, Star Blizzard was observed reaching out to their usual targets with carefully crafted spear-phishing messages. This time, the lure was an invitation to join a WhatsApp group marking a notable departure from their traditional tactics, techniques, and procedures (TTPs). This shift underscores an evolution in their strategy, leveraging a fresh access vector to compromise accounts.