Blind Eagle · ATT&CK software

Malware

4 software · source: MITRE ATT&CK G0099

Every mark is malware or a tool ATT&CK records this group using. A name opens it on attack.mitre.org; its chip shows who else uses it.

Connect AI

Open Blind Eagle's actor page

Every one of the 4 is a mark on the map. Named now: 1 to 4, by name first.

CaminhoS9016Malware · ATT&CK software
Actors that use it
HeartCryptS9018Malware · ATT&CK software
Actors that use it
PureCrypterS9019Malware · ATT&CK software
Actors that use it
njRATS0385Malware · ATT&CK software
Actors that use it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.