#MacroMaze

1 article

APT28 Operation MacroMaze: Webhook-Driven Macro Execution Targeting Western Europe

Analysis of a targeted campaign attributed to APT28, utilizing macro-enabled documents and legitimate webhook services for command-and-control obfuscation.

Runtime Rebel Intel

2 min read·Feb 24, 2026