← Back to all threat actors

APT-C-36

Also known as Blind Eagle, TAG-144, AguilaCiega, APT-Q-98
Tracked as G0099

APT-C-36 is a suspected South American threat group that has engaged in espionage and financially motivated operations since at least 2018. APT-C-36 has targeted government institutions and entities in the financial, energy, and professional manufacturing sectors across Colombia and other Latin American countries.

How we source and review actor profiles
Motivation
nation-state
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityAlias: Blind Eagle

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: TAG-144

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: AguilaCiega

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: APT-Q-98

Reviewed identity mapping approved on this date.

Cataloged
IdentityTracking identifier: G0099

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

APT-C-36Canonical Name
APT-Q-98Alias
AguilaCiegaAlias
Blind EagleAlias
TAG-144Alias
G0099Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...