Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Insikt Group has identified five distinct activity clusters linked to TAG-144 (Blind Eagle), targeting primarily Colombian government entities across local, municipal, and federal levels throughout 2024 and 2025. The clusters share similar tactics, techniques, and procedures (TTPs) such as using open-source and cracked remote access trojans (RATs), dynamic domain providers, and legitimate internet services (LIS) for staging. However, they differ in infrastructure, malware deployment, and operational methods. The group maintains an extensive operational infrastructure, employs various RATs, and uses multi-stage infection chains. TAG-144's primary focus appears to be credential theft and espionage, with evidence linking it to Red Akodon and compromised Colombian government email accounts used in spearphishing campaigns.

TAG-144, also known as Blind Eagle, is a cyber threat group that has been actively targeting South American organizations, with a particular focus on Colombian government entities at local, municipal, and federal levels throughout 2024 and 2025. The group operates through five distinct activity clusters that share common tactics, techniques, and procedures (TTPs), including the use of open-source and cracked remote access trojans (RATs) such as LimeRAT, DCrat, AsyncRAT, QuasarRAT, Remcos RAT, NJRat, and others. These RATs facilitate remote control over compromised systems, enabling credential theft and espionage activities. TAG-144 leverages dynamic domain providers and legitimate internet services (LIS) for staging their operations, which complicates detection and attribution. Despite similarities in TTPs, the clusters differ in their infrastructure, malware deployment strategies, and operational methods, indicating a flexible and adaptive adversary. The group employs multi-stage infection chains, increasing the complexity and stealth of their attacks. Notably, TAG-144 has been linked to Red Akodon and has used compromised Colombian government email accounts to conduct spearphishing campaigns, further emphasizing their focus on credential theft and intelligence gathering. While the threat is currently centered on South America, the use of widely available RATs and legitimate services could enable expansion or collateral impact beyond this region. No known exploits in the wild or patches are currently associated with this threat, and the severity is assessed as medium based on the available information.

Detailed information about TAG-144's Persistent Grip on South American Organizations. Get real-time updates, technical details, and mitigation strategies.

TAG-144's Persistent Grip on South American Organizations - Live Threat Intelligence - Threat Radar | OffSeq.com

TAG-144's Persistent Grip on South American Organizations

Threats Tagged 'blotchyquasar'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'blotchyquasar'

Lead Pen Test Professional