Trusted Design

APT-C-36

G0099 · MITRE Pageへのリンク

脅威アクターの詳細

[APT-C-36](https://attack.mitre.org/groups/G0099) is a suspected South America espionage group that has been active since at least 2018. The group mainly targets Colombian government institutions as well as important corporations in the financial sector, petroleum industry, and professional manufacturing.(Citation: QiAnXin APT-C-36 Feb2019)

別名・別称

APT-C-36
Blind Eagle

利用した攻撃手法

• T1053.005 - Scheduled Task
• T1204.002 - Malicious File
• T1566.001 - Spearphishing Attachment
• T1036.004 - Masquerade Task or Service
• T1588.002 - Tool
• T1571 - Non-Standard Port
• T1027 - Obfuscated Files or Information
• T1059.005 - Visual Basic
• T1105 - Ingress Tool Transfer

関連するCVE (攻撃手法に関連)

• CVE-2014-4114 (T1059.005)
• CVE-2015-1770 (T1059.005)
• CVE-2015-2545 (T1566.001)
• CVE-2017-0199 (T1059.005)
• CVE-2012-0158 (T1059.005)
• CVE-2013-3906 (T1027)
• CVE-2014-6352 (T1059.005)
• CVE-2015-0016 (T1036.004)
• CVE-2010-3333 (T1204.002)
• CVE-2010-0188 (T1204.002)
• CVE-2010-2884 (T1204.002)
• CVE-2013-0640 (T1204.002)
• CVE-2011-0611 (T1204.002)
• CVE-2010-1553 (T1566.001)
• CVE-2014-1761 (T1566.001)
• CVE-2015-2853 (T1566.001)
• CVE-2017-16929 (T1036.004)
• CVE-2012-1876 (T1566.001)
• CVE-2012-2539 (T1566.001)
• CVE-2013-3660 (T1566.001)
• CVE-2013-7331 (T1036.004)
• CVE-2009-3129 (T1566.001)
• CVE-2013-5990 (T1566.001)
• CVE-2015-5477 (T1036.004)
• CVE-2012-4681 (T1036.004)
• CVE-2025-13335 (T1571)
• CVE-2012-1856 (T1059.005)
• CVE-2014-6332 (T1059.005)
• CVE-2015-0097 (T1059.005)
• CVE-2017-0261 (T1059.005)
• CVE-2017-0262 (T1059.005)
• CVE-2014-0322 (T1059.005)
• CVE-2017-8570 (T1059.005)
• CVE-2016-0189 (T1059.005)
• CVE-2017-0143 (T1059.005)
• CVE-2012-4792 (T1105)
• CVE-2010-0806 (T1105)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る