BlueDelta Targets Defense and Diplomacy with HOOKEDGE

CYBER

THREAT

ANALYSIS

RUSSIA

August 27, 2026

BlueDelta Targets Defense and

Diplomacy with HOOKEDGE

Insikt Group identified Russian state- BlueDelta delivered HOOKEDGE, a sponsored group BlueDelta (APT28) lightweight batch-script successor targeting government, diplomatic, and to HEADLACE, via macro-enabled defense organizations in Romania, Spain, Word documents that abuse and Türkiye between September 2025 webhook[.]site for C2, payload and April 2026. staging, and data exfiltration.

BlueDelta continued its longstanding

use of legitimate internet services

for C2, payload staging, and data

exfiltration, blending malicious traffic

with normal web activity to evade

network defenses.

CYBER THREAT ANALYSIS

Analysis cut-off date: July 20, 2026

Executive Summary

Insikt Gr…