#9
The Hacker News
general
August 28, 2026 at 08:20 UTC
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
By [email protected] (The Hacker News)
AI Summary
Recorded Future's Insikt Group linked a campaign deploying a newly identified Windows backdoor called HOOKEDGE to APT28 (Russia's GRU-linked threat actor), targeting government and diplomatic organizations in Romania, Spain, and Türkiye between September 2025 and April 2026. HOOKEDGE is distributed as a lightweight Windows batch script, representing a low-footprint persistence mechanism suited to stealthy espionage operations. European government defenders should treat APT28's shift to novel, undocumented tooling as an indicator of continued operational adaptation.
Relevance score: 79.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →