Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

Blind Eagle, a known threat actor, has launched a new campaign targeting Latin American organizations with phishing emails disguised as court and administrative notices. The emails are written in Portuguese and Spanish and appear to be related to court notifications, fiscalía notices, and tutela proceedings. The goal of the campaign is to deliver a remote access trojan, which is related to AsyncRAT and DCRat. This trojan allows attackers to gain remote access to the targeted systems. The campaign's use of judicial and administrative themes is likely intended to create a sense of urgency and legitimacy, increasing the chances of successful infection. The threat actor's tactics suggest a targeted and sophisticated approach to compromising organizations in the region.