G0099

APT-C-36APT-C-36

Also known as: Blind Eagle · APT-C-36

Known aliases
2
Target sectors
5

Profile

Since April 2018, an APT group (Blind Eagle, APT-C-36) suspected coming from South America carried out continuous targeted attacks against Colombian government institutions as well as important corporations in financial sector, petroleum industry, professional manufacturing, etc.

Aliases· 2

Blind EagleAPT-C-36

Target sectors· 5

PetroleumManufacturingFinancialPrivate sectorGovernment

Known victims· 5

  • Ecuador
  • Colombia
  • Spain
  • Panama
  • Chile

MITRE ATT&CK Group crosswalk

G0099

References

  1. https://ti.360.net/blog/articles/apt-c-36-continuous-attacks-targeting-colombian-government-institutions-and-corporations-en/
  2. https://www.ecucert.gob.ec/wp-content/uploads/2022/03/alerta-APTs-2022-03-23.pdf
  3. https://blogs.blackberry.com/en/2023/02/blind-eagle-apt-c-36-targets-colombia
  4. https://lab52.io/blog/apt-c-36-recent-activity-analysis/
  5. https://www.trendmicro.com/en_ph/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-ameri.html
  6. https://research.checkpoint.com/2023/blindeagle-targeting-ecuador-with-sharpened-tools/
  7. https://attack.mitre.org/groups/G0099/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
APT37
Actor
APT-C-34
Actor
APT-C-60
Actor
APT42
Actor
APT-C-27
Actor
APT32
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.