APT-C-36
APT-C-36 is a suspected South American threat group that has engaged in espionage and financially motivated operations since at least 2018. APT-C-36 has targeted government institutions and entities in the financial, energy, and professional manufacturing sectors across Colombia and other Latin American countries.
- ATT&CK ID
- G0099
- Techniques
- 25
- Tools
- 9
Also tracked as Blind Eagle · TAG-144 · AguilaCiega · APT-Q-98
In the news
Techniques
Reconnaissance
Resource Development
Acquire InfrastructureCompromise InfrastructureCompromise AccountsDevelop CapabilitiesObtain CapabilitiesStage CapabilitiesGenerate Content
Initial Access
External Remote ServicesPhishing
Execution
Windows Management InstrumentationScheduled Task/JobCommand and Scripting InterpreterUser ExecutionHijack Execution Flow
Persistence
Scheduled Task/JobExternal Remote Services
Privilege Escalation
Scheduled Task/JobProcess Injection
Stealth
Obfuscated Files or InformationMasqueradingProcess InjectionExecution GuardrailsHide ArtifactsHijack Execution FlowSocial Engineering
Lateral Movement
Command and Control
Ingress Tool TransferDynamic ResolutionNon-Standard Port
Software
AsyncRAT · Caminho · DCRAT · HeartCrypt · Imminent Monitor · PureCrypter · QuasarRAT · Remcos · njRAT