Cyber Resilience

Threat actor · all actors

APT-C-36G0099 state

aka APT-C-36, Blind Eagle, TAG-144, AguilaCiega, APT-Q-98

Last updated: 2026-10-12

0attributed CVEs
54ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active

About this actor

[APT-C-36](https://attack.mitre.org/groups/G0099) is a suspected South American threat group that has engaged in espionage and financially motivated operations since at least 2018. [APT-C-36](https://attack.mitre.org/groups/G0099) has targeted government institutions and entities in the financial, energy, and professional manufacturing sectors across Colombia and other Latin American countries.(Citation: QiAnXin APT-C-36 Feb2019)(Citation: Kaspersky BlindEagle AUG 2024)(Citation: Check Point Blind Eagle MAR 2025)(Citation: Recorded Future TAG-144 AUG 2025)

Source: MITRE ATT&CK

Names & naming systems

Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.

MITRE ATT&CKG-number catalogue id

G0099

Recorded FutureTAG id

TAG-144

Unclassifiedno scheme matched

APT-C-36Blind EagleAguilaCiegaAPT-Q-98

How we know this

Data origin
MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
Techniques
MITRE ATT&CK STIX mappings — 54 ATT&CK techniques on file.
Named victims
None on file.

See how actor data is built for the full pipeline.

Activity timeline

2026: 3 named in reporting32026

Profile

CVERiskCVSSEPSSPublishedProducts
No attributed CVEs.

Mitigating controls (NIST 800-53)

ControlTechniques coveredCoverage
SI-424 / 5444%
CM-622 / 5441%
SI-322 / 5441%
CM-221 / 5439%
CM-718 / 5433%
CA-715 / 5428%
SI-714 / 5426%
AC-313 / 5424%
AC-613 / 5424%
SI-213 / 5424%
SC-712 / 5422%
AC-211 / 5420%
AC-411 / 5420%
RA-511 / 5420%
SI-1011 / 5420%

Co-occurring actors

None.

Similar actors

Similar TTPs

Same category