Blind Eagle · ATT&CK software

Tools

5 software · source: MITRE ATT&CK G0099

Every mark is malware or a tool ATT&CK records this group using. A name opens it on attack.mitre.org; its chip shows who else uses it.

Connect AI

Open Blind Eagle's actor page

Every one of the 5 is a mark on the map. Named now: 1 to 5, by name first.

AsyncRATS1087Tool · ATT&CK software
Actors that use it
DCRATS9017Tool · ATT&CK software
Actors that use it
Imminent MonitorS0434Tool · ATT&CK software
Actors that use it
QuasarRATS0262Tool · ATT&CK software
Actors that use it
RemcosS0332Tool · ATT&CK software
Actors that use it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.