Blind Eagle

Reported Context (8)

Spanish-speaking hacking group described as targeting government agencies, financial institutions, and corporate entities in Latin America. BraZetsu Malware Turns Compromised Windows Hosts Into Marketplace Inventory
Threat actor whose loader, phishing infrastructure, and RAT-related activity are examined in the article. Stealer-Exposed Workstation Reveals Blind Eagle’s Malware and Phishing Operation
LevelBlue attributes the observed staging servers and evolving loader chains to this actor, which targets Colombia and broader Latin America. The article also tracks it as APT-C-36, APT-Q-98, TAG-144 and AguilaCiega. Blind Eagle Updates Loaders and AsyncRAT Toolkit
Named as an alternate name for TAG-144, which the article says targeted Colombian government institutions. How Recorded Future’s Insikt Group Combines Analyst Expertise and Automation for Threat Intelligence
The article identifies APT-C-36 as another name for BlindEagle and attributes the same reported cyber activity to the group. BlindEagle Combines Geofenced Phishing With Commodity RATs

CVE (10)

Malware (33)

People (17)

Threat Actors (10)

MITRE ATT&CK (38)

Vendors (12)

Products (31)

Tools (15)

Industries (15)

Countries (15)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.