Wednesday 4 November
Global

Your region, kept on this device.

APT-C-36

Threat actor

Names and who uses them

  • APT-C-36Our name
  • Blind EagleMITRE ATT&CK
  • AguilaCiegaRecorded Future
  • APT-Q-98Recorded Future
  • TAG-144Recorded Future

Targets

Sectors: Government, Energy, Finance, Manufacturing

Regions: Latin America

Source: MITRE ATT&CK

Known techniques

  • T1027Obfuscated Files or Information
  • T1027.003Steganography
  • T1027.013Encrypted/Encoded File
  • T1027.016Junk Code Insertion
  • T1036.004Masquerade Task or Service
  • T1036.005Match Legitimate Resource Name or Location
  • T1047Windows Management Instrumentation
  • T1053.005Scheduled Task
  • T1055.012Process Hollowing
  • T1059.001PowerShell
  • T1059.005Visual Basic
  • T1059.007JavaScript
  • T1105Ingress Tool Transfer
  • T1133External Remote Services
  • T1204.001Malicious Link
  • T1204.002Malicious File
  • T1480Execution Guardrails
  • T1534Internal Spearphishing
  • T1564.003Hidden Window
  • T1566.001Spearphishing Attachment
  • T1566.002Spearphishing Link
  • T1568Dynamic Resolution
  • T1571Non-Standard Port
  • T1574.001DLL
  • T1583.001Domains
  • T1583.003Virtual Private Server
  • T1583.006Web Services
  • T1584.005Botnet
  • T1586.002Email Accounts
  • T1586.003Cloud Accounts
  • T1587.001Malware
  • T1588.001Malware
  • T1588.002Tool
  • T1593Search Open Websites/Domains
  • T1608.001Upload Malware
  • T1683.001Written Content
  • T1683.002Audio-Visual Content
  • T1684.001Impersonation
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.

Last updated 2 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Report a mistake