IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

APT28 HOOKEDGE Backdoor Abuses Microsoft Edge and webhook.site for C2 and Data Exfiltration

CP
Cyber Press
Published August 28, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT28INFRASTRUCTUREhttp://webhook.site/6…http://webhook.site/1…CAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(2)
Capability
Victim

Indicators of Compromise

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://webhook.site/62114596-33f5-47fb-9012-0223529e5a13/docopened.jpgHighScore 58/100First seen
URLhttp://webhook.site/1e72b758-79e4-4c1c-90ed-7a8dc118f105HighScore 58/100First seen

IOC Relationship Graph

2 total IOCs
URL
URL2Actors1APT28 HOOKEDGE Backdoor Abuses Microsoft Edge and webhook.site for C2 and Data ExfiltrationREPORThttp://webhook.site/…http://webhook.site/…APT28
scroll to zoom · drag to pan · click IOC to open