IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE0 IOCs

Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure

LA
Lab52
Published February 13, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT28INFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure
Capability
Victim

Indicators of Compromise

No IOCs extracted from this report.

IOC Relationship Graph

IOC Relationship Graph0 total IOCs
Actors1REPORTOperation MacroMaze: new AAPT28
scroll to zoom · drag to pan · click IOC to open