APT28-linked HOOKEDGE backdoor targets European government officials via malicious Word documents

The threat actor APT28 is deploying a two-stage backdoor, HOOKEDGE, against European diplomats and government entities using weaponized Word documents. The malware utilizes webhook.site for command-and-control and data exfiltration, with a tiered delivery mechanism that accelerates second-stage infection for high-value targets.