Trusted Design

APT-C-36

アクターID: G0099

· MITRE Pageへのリンク

脅威アクターの詳細

APT-C-36 is a suspected South America espionage group that has been active since at least 2018. The group mainly targets Colombian government institutions as well as important corporations in the financial sector, petroleum industry, and professional manufacturing.(Citation: QiAnXin APT-C-36 Feb2019)

脅威アクターの別名・別称

APT-C-36
Blind Eagle

利用した攻撃手法

• T1053.005 - Scheduled Task
• T1087.002 - Domain Account
• T1598.003 - Spearphishing Link
• T1588.001 - Malware
• T1199 - Trusted Relationship
• T1562.001 - Disable or Modify Tools
• T1059.011 - Lua
• T1027.010 - Command Obfuscation
• T1547.013 - XDG Autostart Entries

関連するCVE (攻撃手法に関連)

• CVE-2014-4114 (T1027.010)
• CVE-2015-1770 (T1027.010)
• CVE-2015-2545 (T1598.003)
• CVE-2017-0199 (T1027.010)
• CVE-2012-0158 (T1027.010)
• CVE-2013-3906 (T1059.011)
• CVE-2014-6352 (T1027.010)
• CVE-2015-0016 (T1588.001)
• CVE-2010-3333 (T1087.002)
• CVE-2010-0188 (T1087.002)
• CVE-2010-2884 (T1087.002)
• CVE-2013-0640 (T1087.002)
• CVE-2011-0611 (T1087.002)
• CVE-2010-1553 (T1598.003)
• CVE-2014-1761 (T1598.003)
• CVE-2015-2853 (T1598.003)
• CVE-2017-16929 (T1588.001)
• CVE-2012-1876 (T1598.003)
• CVE-2012-2539 (T1598.003)
• CVE-2013-3660 (T1598.003)
• CVE-2013-7331 (T1588.001)
• CVE-2009-3129 (T1598.003)
• CVE-2013-5990 (T1598.003)
• CVE-2015-5477 (T1588.001)
• CVE-2012-4681 (T1588.001)
• CVE-2025-13335 (T1562.001)
• CVE-2012-1856 (T1027.010)
• CVE-2014-6332 (T1027.010)
• CVE-2015-0097 (T1027.010)
• CVE-2017-0261 (T1027.010)
• CVE-2017-0262 (T1027.010)
• CVE-2014-0322 (T1027.010)
• CVE-2017-8570 (T1027.010)
• CVE-2016-0189 (T1027.010)
• CVE-2017-0143 (T1027.010)
• CVE-2012-4792 (T1547.013)
• CVE-2010-0806 (T1547.013)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る