APT-C-36 (aka Blind Eagle) Updates Its Spam Campaign Against South American Entities

guest · Sep 20, 2021

A New Wave of Malware Attack Targeting Organizations in South America
September 20, 2021
https://thehackernews.com/2021/09/a-new-wave-of-malware-attack-targeting.html

A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans (RATs) and geolocation filtering to avoid detection, according to new research.

Cybersecurity firm Trend Micro attributed the attacks to an advanced persistent threat (APT) tracked as APT-C-36 (aka Blind Eagle), a suspected South America espionage group that has been active since at least 2018 and previously known for setting its sights on Colombian government institutions and corporations spanning financial, petroleum, and manufacturing sectors.
Click to expand...

Multiple verticals, including government, financial, healthcare, telecommunications, and energy, oil, and gas, are said to have been affected, with a majority of the targets for the latest campaign located in Colombia and a smaller fraction also coming from Ecuador, Spain, and Panama.

"APT-C-36 selects their targets based on location and most likely the financial standing of the email recipient," the researchers said. "These, and the prevalence of the emails, lead us to conclude that the threat actor's ultimate goal is financial gain rather than espionage."
Click to expand...

Trend Micro: APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs

In 2019, we wrote a blog entry about a threat actor, likely based in Colombia, targeting entities in Colombia and other South American countries with spam emails. This threat actor is sometimes referred to as APT-C-36 or Blind Eagle. Since then, we have continued tracking this threat actor. In this blog entry, we share our new findings about APT-C-36’s ongoing spam campaign during that monitoring phase.
Click to expand...

Log in or Sign up

APT-C-36 (aka Blind Eagle) Updates Its Spam Campaign Against South American Entities

guest Guest

Log in or Sign up

APT-C-36 (aka Blind Eagle) Updates Its Spam Campaign Against South American Entities

guest Guest

Useful Searches