APT28's Operation MacroMaze: Macro Malware Campaign Targets Europe

APT28's Operation MacroMaze: Macro Malware Campaign Targets Europe

First seen 24 Feb 2026, 16:13 UTC •Securityaffairs.CoTechnaduRescana •60.0

Article Content

Browse articles
ThreatCluster

APT28, a Russia-linked advanced persistent threat group, conducted a cyberespionage campaign named Operation MacroMaze from September 2025 to January 2026. The campaign involved deploying macro malware embedded in Microsoft Office documents and utilized webhook-based methods for command-and-control communications and data exfiltration, affecting various entities across Western and Central Europe.

How this analysis works

Timeline

2025-09-01
Operation MacroMaze campaign began
2026-01-31
Operation MacroMaze campaign ended
2026-02-24
Articles published detailing the campaign

Extracted Entities

1 / 2