Blind Eagle, also tracked as APT-C-36, has launched a new Latin America-focused phishing campaign that uses Spanish and Portuguese judicial and administrative lures to deliver a remote access trojan. Zenox reported that the campaign observed between late October and early November 2026 involved nearly 3,300 malicious emails, though it could not confirm any successful real-world compromises.