
Blind Eagle, a notorious threat actor operating since at least 2018, is leveraging NTLM flaws to launch sophisticated cyber attacks against Colombian institutions, creating unprecedented challenges for these entities. Also known as AguilaCiega, APT-C-36, and APT-Q-98, this cybercriminal group has focused its efforts on South American countries, primarily Colombia and Ecuador. The group’s campaigns have been monitored closely since November










