Still Circling: Toolkit Keeps Evolving

Reported 18 Jul 2026 by otx · Severity: medium

Between May and July 2026, researchers tracked the Latin America-focused threat actor Blind Eagle through multiple exposed staging servers, identifying significant toolkit evolution. Four key developments emerged: a third string-obfuscation scheme featuring JavaScript with custom