Malware
HEADLACE
- First Reported
- Jun 11, 2026
- Latest Reported
- Aug 27, 2026
Reported Context (2)
- This assessment is based on significant code and tradecraft overlap between HOOKEDGE and the HEADLACE backdoor used in prior BlueDelta campaigns, consistent infrastructure patterns, and targeting consistent with known BlueDelta Uses HOOKEDGE Backdoor in Campaigns Targeting European Government and Diplomatic Organizations
- HeadLace APT28’s Tradecraft Evolves from X-Agent to LLM-Driven Malware
CVE (2)
Malware (16)
People (1)
Threat Actors (35)
MITRE ATT&CK (14)
Vendors (2)
Products (21)
Tools (4)
Industries (10)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.