BlindEagle Leveraging BlotchyQuasar

**BlindEagle campaign delivering BlotchyQuasar RAT**: The report documents a phishing campaign targeting Colombian and Ecuadorian financial and insurance sectors in which password-protected ZIPs hosted on compromised Google Drive accounts install a multi-layer obfuscated .NET BlotchyQuasar (QuasarRAT variant); it details the loader chain, Pastebin-based 3DES/BASE64 C2 retrieval, keylogging and browser/FTP credential theft capabilities, lists targeted banks, and identifies C2 domains and infrastructure patterns.