APT-C-36
threat actor01
also known as
Other names and identifiers for this entity.
ATT&CK
APT-C-36 · APT-Q-98 · AguilaCiega · Blind Eagle · TAG-144
MISP
APT-C-36 · Blind Eagle
Since April 2018, an APT group (Blind Eagle, APT-C-36) suspected coming from South America carried out continuous targeted attacks against Colombian government institutions as well as important corporations in financial sector, petroleum industry, professional manufacturing, etc.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (38)
ATT&CK techniques this enables or maps to.
showing 20 of 38
04
software used (9)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://ti.360.net/blog/articles/apt-c-36-continuous-attacks-targeting-colombian-government-institutions-and-corporations-en/
- https://www.ecucert.gob.ec/wp-content/uploads/2022/03/alerta-APTs-2022-03-23.pdf
- https://blogs.blackberry.com/en/2023/02/blind-eagle-apt-c-36-targets-colombia
- https://lab52.io/blog/apt-c-36-recent-activity-analysis/
- https://www.trendmicro.com/en_ph/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-ameri.html
- https://research.checkpoint.com/2023/blindeagle-targeting-ecuador-with-sharpened-tools/
- https://attack.mitre.org/groups/G0099/