← Back to Actors
APT-C-36
APT-C-36Blind EagleTAG-144AguilaCiegaAPT-Q-98
[APT-C-36](https://attack.mitre.org/groups/G0099) is a suspected South American threat group that has engaged in espionage and financially motivated operations since at least 2018. [APT-C-36](https://attack.mitre.org/groups/G0099) has targeted government institutions and entities in the financial, energy, and professional manufacturing sectors across Colombia and other Latin American countries.(Citation: QiAnXin APT-C-36 Feb2019)(Citation: Kaspersky BlindEagle AUG 2024)(Citation: Check Point Blind Eagle MAR 2025)(Citation: Recorded Future TAG-144 AUG 2025)
38
Techniques
30
Covered
8
Gaps
79%
Coverage
Coverage30/38
GAPS (8)
COVERED (30)
T1027Obfuscated Files or Information707 det.T1027.003Steganography5 det.T1027.013Encrypted/Encoded File8 det.T1036.004Masquerade Task or Service7 det.T1036.005Match Legitimate Resource Name or Location49 det.T1047Windows Management Instrumentation88 det.T1053.005Scheduled Task100 det.T1055.012Process Hollowing9 det.T1059.001PowerShell384 det.T1059.005Visual Basic71 det.T1059.007JavaScript64 det.T1105Ingress Tool Transfer199 det.T1133External Remote Services80 det.T1204.001Malicious Link11 det.T1204.002Malicious File468 det.T1480Execution Guardrails1 det.T1534Internal Spearphishing300 det.T1564.003Hidden Window11 det.T1566.001Spearphishing Attachment1144 det.T1566.002Spearphishing Link1194 det.T1568Dynamic Resolution11 det.T1571Non-Standard Port17 det.T1574.001DLL111 det.T1583.001Domains69 det.T1583.006Web Services1 det.T1586.003Cloud Accounts36 det.T1587.001Malware10 det.T1588.001Malware2 det.T1588.002Tool13 det.T1608.001Upload Malware3 det.