Feb 232026 APT28 Targeted European Entities Using Webhook-Based Macro Malware APT28’s Operation MacroMaze used macro-laced documents and webhook.site to exfiltrate data across Europe from Sept 2025 to Jan 2026.
