IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

APT28 HOOKEDGE Backdoor Abuses Microsoft Edge and webhook.site for C2 and Data Exfiltration

CP
Cyber Press
Published August 28, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT28INFRASTRUCTUREhttp://webhook.site/6…http://webhook.site/1…CAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(2)
Capability
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://webhook.site/62114596-33f5-47fb-9012-0223529e5a13/docopened.jpg
intel-blognetworkurl
High
58
Aug 28, 26
URLhttp://webhook.site/1e72b758-79e4-4c1c-90ed-7a8dc118f105
intel-blognetworkurl
High
58
Aug 28, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
URL
URL2Actors1REPORTAPT28 HOOKEDGE Backdoor AbAPT28
scroll to zoom · drag to pan · click IOC to open