ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
APT-C-36
1 incidentes
1 paises
0 sectores
apt CO Ultimo: 2026-05-25
Aliases: Blind Eagle, aguilaciega, apt-c-36, apt-q-98, apt36, blind eagle, blotchyquasar, tag-144, Imminent RAT, Colombian government institutions, el uso de herramientas maliciosas, regiones del Sur de América
APT-C-36, also identified as Blind Eagle, is a cyber espionage group that emerged in April 2018, primarily focusing its operations within Latin America, particularly against Colombian entities. This group, assessed with high confidence to be of Colombian origin, is motivated by a hybrid objective encompassing both intelligence gathering for political and strategic purposes, and financial gain through cyber theft. APT-C-36 distinguishes itself through its consistent use of localized geopolitical themes in its sophisticated spear-phishing campaigns and its adeptness at abusing legitimate cloud services and URL shorteners to deliver commodity malware while evading detection by non-targeted audiences. The group frequently customizes and deploys readily available Remote Access Trojans (RATs) rather than developing unique tools, enabling agile adaptation and reduced operational costs.