Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
Russian APT28-Linked Hackers Deploy HOOKEDGE Backdoor in European Espionage Attacks
Threat Actors
Malware Families
Excerpt
Russian state-linked threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has used a lightweight Windows backdoor named HOOKEDGE in cyberespionage operations against European diplomatic, government, and defense-sector organizations. Researchers linked the activity to targets in Romania, Spain, and Turkey, with campaign activity observed from late September 2025 through early April 2026 and newer variants emerging during June and July 2026. According…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →13 indicators
IOC Relationship Graph
Building graph…