Gbhackers iconGbhackersSep 5, 2026

Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe

The activity, documented by PolySwarm, targeted entities in Romania, Spain, and Turkey between late September 2025 and early April 2026.

Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe

Share this story

Send the public story page.

Useful takeaways from this story.

The activity, documented by PolySwarm, targeted entities in Romania, Spain, and Turkey between late September 2025 and early April 2026.

Russian state-sponsored threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has deployed a lightweight Windows backdoor named HOOKEDGE in espionage operations targeting...

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

The activity, documented by PolySwarm, targeted entities in Romania, Spain, and Turkey between late September 2025 and early April 2026. Russian state-sponsored threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has deployed a lightweight Windows backdoor named HOOKEDGE in espionage operations targeting government, diplomatic, and defense-manufacturing organizations across Europe.

Details worth keeping

Russian state-sponsored threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has deployed a lightweight Windows backdoor named HOOKEDGE in espionage operations targeting government, diplomatic, and defense-manufacturing organizations across Europe.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app