APT-C-36

APT / StateG0099 ↗
Techniques (MITRE ATT&CK)38
SourceMITRE ATT&CK
Also known as:Blind EagleTAG-144AguilaCiegaAPT-Q-98

Vexday analysis

Grupo de ameaça persistente avançada de origem sul-americana, o APT-C-36 — também rastreado como Blind Eagle, TAG-144, AguilaCiega e APT-Q-98 (identificador MITRE ATT&CK: G0099) — conduz operações de espionagem e motivadas financeiramente ao menos desde 2018. Suas atividades têm como alvo instituições governamentais e entidades dos setores financeiro, energético e de manufatura na Colômbia e em outros países da América Latina. Ao grupo são atribuídas 38 técnicas documentadas na base MITRE ATT&CK.

Techniques (MITRE ATT&CK) 38

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Reconnaissance
Search Open Websites/Domains
Resource development
DomainsVirtual Private ServerWeb ServicesBotnetEmail AccountsCloud AccountsMalwareMalwareToolUpload MalwareWritten ContentAudio-Visual Content
Initial access
Spearphishing AttachmentSpearphishing Link
Execution
Windows Management InstrumentationScheduled TaskPowerShellVisual BasicJavaScriptMalicious LinkMalicious File
Persistence
External Remote Services
Lateral movement
Internal Spearphishing
Command and control
Ingress Tool TransferDynamic ResolutionNon-Standard Port
stealth
Obfuscated Files or InformationSteganographyEncrypted/Encoded FileJunk Code InsertionMasquerade Task or ServiceMatch Legitimate Resource Name or LocationProcess HollowingExecution GuardrailsHidden WindowDLLImpersonation

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

APT-C-36 uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →