185.82.218[.]119IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 4 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader“…actors are said to have delivered new variants of HOOKEDGE that abandon the use of webhook.site in favor of a dedicated IP address ("185.82.218[.]119:443" for both tasking and exfiltration.”
Indicators reported together
named in the same reports- 91.149.221[.]118in 1 report
- 91.149.221[.]123in 1 report
- 166.88.239[.]54in 1 report
- 194.87.108[.]12in 1 report
- 194.87.108[.]217in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-21509, CVE-2026-8496
Thanks — we review every report.