Advisory: Russian FSB cyber actor Star Blizzard continues worldwide spear-phishing campaigns

This advisory describes ongoing, worldwide spear‑phishing campaigns by the Russia‑based Star Blizzard (FSB Centre 18) targeting academia, defence, government, NGOs, think tanks and politicians; the actor uses OSINT-driven reconnaissance, impersonation of contacts, malicious domains and EvilGinx-based credential/session-cookie harvesting to bypass MFA, compromise email accounts, steal emails/attachments and set forwarding rules, with mitigation guidance and MITRE ATT&CK mappings provided.