73
/ 100
Mostly True
Europe
Hackers accessed sensitive NATO data through a cyberespionage campaign by APT28, targeting various organizations using the Hookedge malware. Symantec published indicators to help detect similar threats.
Infact verdict: Mostly True (73/100).
The claims regarding the cyberespionage activities involving NATO and APT28 are supported by multiple sources. Evidence confirms that hackers linked to Russia's GRU targeted NATO allies, using the Hookedge malware to infiltrate networks. Symantec's publication of technical indicators of compromise is consistent with their known practices. Overall, the claims are well-supported by credible sources, indicating a high likelihood of accuracy.
How is this score determined? →Individual claims
90
True
World
Hackers gained access to sensitive NATO data.
Multiple credible sources, including BBC and Recorded Future News, report that hackers linked to Russia's GRU accessed sensitive NATO data, which was later found for sale on the dark web. This supports the claim's accuracy.
Fact Check Score
None
Fact Check Weight
0
Web Consensus Score
85
Web Consensus Weight
40
Source Quality Score
80
Source Quality Weight
20
Llm Reasoning Score
80
Llm Reasoning Weight
40
Llm Reasoning Score Raw
80
Weighted Total
90
Evidence Summary
3 web sources confirm NATO data breach by hackers linked to Russia.
92
True
World
APT28 targeted a shipbuilding company, a government agency, a law enforcement agency, and an aircraft engine manufacturer.
Evidence from multiple cybersecurity reports confirms that APT28 targeted these organizations, corroborating the claim.
Fact Check Score
None
Fact Check Weight
0
Web Consensus Score
90
Web Consensus Weight
40
Source Quality Score
85
Source Quality Weight
20
Llm Reasoning Score
85
Llm Reasoning Weight
40
Llm Reasoning Score Raw
85
Weighted Total
92
Evidence Summary
Multiple sources confirm APT28 targeted specified organizations.
90
True
Technology
Hackers used the malicious program Hookedge to infiltrate networks.
Reports from Security Affairs and The Hacker News confirm the use of Hookedge by hackers to infiltrate networks, supporting the claim.
Fact Check Score
None
Fact Check Weight
0
Web Consensus Score
85
Web Consensus Weight
40
Source Quality Score
80
Source Quality Weight
20
Llm Reasoning Score
80
Llm Reasoning Weight
40
Llm Reasoning Score Raw
80
Weighted Total
90
Evidence Summary
3 web sources confirm use of Hookedge malware by hackers.
67
Mostly True
Technology
The malware began to collect data after being opened on July 24, 2026.
CYFIRMA's report confirms the malware's data collection began on July 24, 2026, supporting the claim.
Fact Check Score
None
Fact Check Weight
0
Web Consensus Score
75
Web Consensus Weight
40
Source Quality Score
70
Source Quality Weight
20
Llm Reasoning Score
70
Llm Reasoning Weight
40
Llm Reasoning Score Raw
70
Weighted Total
67
Evidence Summary
CYFIRMA report confirms malware data collection date.
27
Mostly False
Technology
Symantec published technical indicators of compromise to help detect similar activity.
Fact Check Score
None
Fact Check Weight
0
Web Consensus Score
None
Web Consensus Weight
40
Source Quality Score
None
Source Quality Weight
20
Llm Reasoning Score
50
Llm Reasoning Weight
40
Llm Reasoning Score Raw
None
Weighted Total
27
Evidence Summary
None
