APT28-linked HOOKEDGE used in European espionage campaign BlueDelta, tracked as APT28/Forest Blizzard, used the Windows backdoor HOOKEDGE against diplomatic, government, and defense targets in #Romania, Spain, and Turkey. Activity ran from late September 2025 to early April 2026, with new variants in June and July 2026. Initial access relied on macro-enabled Word lures

https://cyberpress.org/russian-apt28-linked-hackers-deploy-hookedge-backdoor-in-european-espionage-attacks/