Colombia Hit in StrikeShark Campaigns

Two security reports from different companies again placed Colombia among the countries affected by campaigns targeting public agencies and technology companies. Infobae reported on an operation attributed by Kaspersky to StrikeShark, with victims in government bodies, diplomatic entities, and software companies. At the same time, Zscaler described a BlindEagle campaign against a Colombian government agency.

What is known about the campaign attributed to StrikeShark?

In the StrikeShark case, Infobae said Kaspersky identified a new malware called SharkLoader as the core of the campaign. According to that coverage, the activity reached government organizations, diplomatic entities, and software companies in several countries, including Colombia in Latin America. It also said Kaspersky identified victims among government bodies, diplomatic entities, and software companies in Colombia, as well as in other countries outside the region.

The available information in this report does not specify the initial infection vectors or the full operational scope of StrikeShark. It does establish that the attribution came from Kaspersky and that the focus included institutional targets and the software sector.

What did Zscaler report about BlindEagle?

Zscaler, for its part, published a report titled "BlindEagle Targets Colombian Government Agency with Caminho and DCRAT". That material confirms a targeted attack against a Colombian government agency and places the campaign within BlindEagle's activity.

Taken together, the two reports place Colombia at the center of at least two separate campaigns tied to different threat actors, one associated with StrikeShark and the other with BlindEagle. In both cases, the named targets are government organizations, although Infobae's coverage also includes diplomatic entities and software companies within StrikeShark's scope.