CVE Intelligence
Home / Threat actors / Star Blizzard

Star Blizzard G1033

🔔 Create alert

Also known as: SEABORGIUM, Callisto Group, TA446, COLDRIVER

Updated at source on Jul 31, 2026 · View on MITRE ATT&CK

0
associated CVEs
23
Techniques
1
Malware and tools

Star Blizzard is a cyber espionage and influence group originating in Russia that has been active since at least 2019. Star Blizzard campaigns align closely with Russian state interests and have included persistent phishing and credential theft against academic, defense, government, NGO, and think tank organizations in NATO countries, particularly the US and the UK.

Exploited vulnerabilities

CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.

ATT&CK does not cite CVEs for this group.

Techniques by tactic

Reconnaissance
T1589 Gather Victim Identity InformationT1593 Search Open Websites/DomainsT1598.002 Spearphishing AttachmentT1598.003 Spearphishing Link
Resource Development
T1583 Acquire InfrastructureT1583.001 DomainsT1585.001 Social Media AccountsT1585.002 Email AccountsT1586.002 Email AccountsT1588.002 ToolT1608.001 Upload Malware
Initial Access
T1078 Valid AccountsT1566.001 Spearphishing Attachment
Execution
T1059.007 JavaScriptT1204.002 Malicious File
Persistence
T1078 Valid Accounts
Privilege Escalation
T1078 Valid Accounts
Stealth
T1078 Valid AccountsT1684.001 Impersonation
Credential Access
T1539 Steal Web Session Cookie
Lateral Movement
T1550.004 Web Session Cookie
Collection
T1114.002 Remote Email CollectionT1114.003 Email Forwarding Rule

Malware and tools

© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.