Surge in Cyber Espionage Threatens Latin American Governments and Corporations

Executive Summary

As of April 2026, Latin America is experiencing a significant escalation in cyber espionage activities. Advanced Persistent Threat (APT) groups, notably APT-C-36 (also known as Blind Eagle), are intensifying their operations against government and corporate targets across the region. These cybercriminals are leveraging sophisticated malware and exploiting system vulnerabilities to infiltrate networks, steal sensitive information, and maintain prolonged access.

APT-C-36: A Persistent Threat

APT-C-36 has been active since approximately 2018, primarily targeting government and financial entities in South America. This group operates with a unique blend of operational objectives and espionage motivations, often intertwining financial-driven campaigns with intelligence collection. Their activities underscore the growing maturity of cyber threats within Latin America and highlight the critical need for robust cybersecurity measures. (brandefense.io)

Surge in Cyberattacks

Recent data indicates a sharp increase in cyberattacks targeting Latin American organizations. In December 2025, the region experienced an average of 3,065 attacks per week, marking a 26% year-over-year increase. This surge surpasses the global average, positioning Latin America as the most cyber-attacked region worldwide. (blog.checkpoint.com)

Exploitation of Vulnerabilities

Cybercriminals are increasingly exploiting system vulnerabilities to gain unauthorized access. Notably, the Coruna exploit kit, disclosed in March 2026, targets iOS devices running versions 13.0 through 17.2.1. This sophisticated toolkit comprises five complete exploit chains and 23 individual exploits, enabling attackers to compromise devices and extract sensitive data. The proliferation of such tools highlights the advanced capabilities of cybercriminals operating in the region. (en.wikipedia.org)

Impact on Government and Corporate Entities

The ramifications of these cyber espionage campaigns are profound. Government agencies are grappling with data breaches and operational disruptions, while corporations face intellectual property theft and financial losses. The integration of artificial intelligence (AI) by cybercriminals has further exacerbated the threat landscape, enabling more sophisticated and evasive attacks. For instance, AI-driven phishing campaigns have been observed, where attackers craft highly convincing messages to deceive individuals into divulging credentials or executing malicious payloads. (darkreading.com)

Recommendations

To mitigate the escalating threat of cyber espionage, the following measures are recommended:

• Enhanced Threat Intelligence Sharing: Establish and participate in regional threat intelligence sharing platforms to disseminate information on emerging threats and vulnerabilities.

• Regular Security Audits: Conduct comprehensive security assessments to identify and remediate system vulnerabilities proactively.

• Employee Training: Implement continuous cybersecurity awareness programs to educate staff on recognizing and responding to phishing attempts and other social engineering tactics.

• Advanced Detection Mechanisms: Deploy AI and machine learning-based security solutions capable of detecting anomalous behaviors indicative of cyber espionage activities.

Conclusion

The surge in cyber espionage activities within Latin America presents a critical challenge to both governmental and corporate entities. The sophistication of cybercriminals, exemplified by groups like APT-C-36, necessitates a coordinated and proactive approach to cybersecurity. By implementing the recommended measures, organizations can bolster their defenses against these persistent and evolving threats.

Highlights:

• Cyberattacks Intensify Pressure on Latin American Governments, Published on Tuesday, March 31
• CrowdStrike Releases The 2025 LatAm Threat Landscape Report, Published on Tuesday, May 06
• LATAM Intelligence Insights Report, April 2025 (English/Spanish) | Group-IB