Threat actor · all actors

APT-C-36G0099 state

aka APT-C-36, Blind Eagle, TAG-144, AguilaCiega, APT-Q-98

Last updated: 2026-07-03

0attributed CVEs

54ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[APT-C-36](https://attack.mitre.org/groups/G0099) is a suspected South American threat group that has engaged in espionage and financially motivated operations since at least 2018. [APT-C-36](https://attack.mitre.org/groups/G0099) has targeted government institutions and entities in the financial, energy, and professional manufacturing sectors across Colombia and other Latin American countries.(Citation: QiAnXin APT-C-36 Feb2019)(Citation: Kaspersky BlindEagle AUG 2024)(Citation: Check Point Blind Eagle MAR 2025)(Citation: Recorded Future TAG-144 AUG 2025)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-4`	24 / 54	44%
`CM-6`	22 / 54	41%
`SI-3`	22 / 54	41%
`CM-2`	21 / 54	39%
`CM-7`	18 / 54	33%
`CA-7`	15 / 54	28%
`SI-7`	14 / 54	26%
`AC-3`	13 / 54	24%
`AC-6`	13 / 54	24%
`SI-2`	13 / 54	24%
`SC-7`	12 / 54	22%
`AC-2`	11 / 54	20%
`AC-4`	11 / 54	20%
`RA-5`	11 / 54	20%
`SI-10`	11 / 54	20%

Co-occurring actors

None.

Similar actors

Similar TTPs

TA2541 0.41
WIRTE 0.37
LazyScripter 0.31
Transparent Tribe 0.31
RedDelta Modified PlugX Infection Chain Operations 0.30