Blind Eagle Launches New Cyber Attacks in Latin America

The hacker group Blind Eagle has launched a new campaign targeting organizations in Latin America. These attacks are carried out using fake judicial and administrative notices disguised as phishing attempts. The goal is to spread a Remote Access Trojan (RAT) related to the well-known malware variants AsyncRAT and DCRat. The campaign employs both Portuguese and Spanish bait that appears to be official court communications. These documents are designed to look like genuine notices from courts or public prosecutors to gain the trust of the recipients.

The attacks aim to persuade recipients to download malicious files that install the Trojan. Analyses show that the attacks primarily target businesses and public institutions. The use of legal terminology and phrasing in the phishing emails increases the likelihood that recipients will click on the links. Security researchers warn that such tactics are particularly effective as they exploit the fear of legal consequences. The malware disseminated through this campaign allows attackers to gain complete access to the infected systems.

This includes the ability to steal data, install surveillance software, and load additional malware. The Trojan is spread through prepared documents sent as attachments in the emails. The security firm Group-IB has documented Blind Eagle's activities and warns of the increasing threat posed by such phishing campaigns. The group is known for constantly changing its tactics to circumvent security measures. The current attacks are an example of the group's adaptability and its ability to adjust to local conditions.

Authorities in several Latin American countries have already taken measures to combat the spread of this malware. These include awareness campaigns for businesses and collaboration with international security organizations. Investigations are focused on identifying the masterminds behind the attacks and initiating legal action. The threat from Blind Eagle is not isolated. Similar groups have employed comparable tactics in the past to spread malware across various regions.

The combination of social engineering techniques and technical sophistication makes these attacks particularly dangerous. Experts advise organizations to review their security protocols and provide training for employees to minimize the risk of such attacks. Implementing multi-factor authentication and regular security updates is also crucial to protect systems. Blind Eagle's campaign highlights the importance of remaining vigilant and continuously informing oneself about new threats. The group has previously conducted similar attacks in other regions, indicating a far-reaching strategy. Security researchers estimate that the group has carried out over 1,000 successful attacks in Latin America in recent months.