Macro-Based Initial Access

Insikt Group traces six months of Word macro lures on three governments to GRU's BlueDelta

The new backdoor, HOOKEDGE, is a Windows batch script that beacons to a free webhook.site endpoint. Insikt Group calls the BlueDelta attribution moderate confidence, resting on overlap with the older HEADLACE implant.