Colombia Hit in StrikeShark Campaigns

Two campaigns with victims in Colombia

Two security reports published by different companies again placed Colombia among the countries affected by campaigns targeting public agencies and technology firms. Infobae reported on an operation Kaspersky attributed to StrikeShark, with victims in government bodies, diplomatic entities, and software companies. In parallel, Zscaler described a BlindEagle campaign against a Colombian government agency.

In the StrikeShark case, Infobae said Kaspersky identified a new malware family called SharkLoader as the core of the campaign. According to that coverage, the activity reached government organizations, diplomatic entities, and software companies in several countries, including Colombia in Latin America. It also said the victims identified by Kaspersky included government bodies, diplomatic entities, and software companies in Colombia, as well as organizations in other countries outside the region.

The available information does not specify in this report which initial access vectors were used or the full operational scope of StrikeShark, but it does establish that the attribution came from Kaspersky and that the focus included institutional targets and the software sector.

The BlindEagle case

Zscaler, for its part, published a report titled "BlindEagle Targets Colombian Government Agency with Caminho and DCRAT". That material confirms a targeted attack on a Colombian government agency and places the campaign within BlindEagle activity.

Taken together, the two reports put Colombia at the center of at least two separate campaigns attributed to different threat actors, one linked to StrikeShark and the other to BlindEagle. In both cases, the organizations mentioned are government bodies, although Infobae's coverage also includes diplomatic entities and software companies within StrikeShark's scope.