InfoSecBulletin Cybersecurity for mankind
BTRC’s National equipment identity register (NEIR) Citizen Portal is under attack by 2.4 million bot traffic in a minute. The attackers have been carrying out this attack intermittently since Friday morning.
Aminul Bari Shuvro, Chief Solution Officer of Synesis IT (responsible for NEIR) said that forty thousand bot traffic hit the NEIR system every second on Friday morning. That is 2.4 million hits per minute.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
He said that in addition to real traffic, a lot of unusual traffic is hitting the server. As a result, many people were unable to access the site. The official also said that NEIR’s citizen portal is capable of handling 6,000 requests per minute.
During the attack, thousands of customers could not verify their handset registration on the NEIR portal using their IMEI numbers.
When visiting the site, the message “429 too many requests” appears. Sometimes the site can be visited, but the entire page appears white.
BTRC launched NEIR for the third time on Thursday (January 1, 2026). This system was launched twice before, but was closed for various reasons.
BTRC was vandalized on the day the NEIR system was launched. Law enforcement arrested 26 people for this crime. The organization filed a case regarding the attack on BTRC on Friday.
Related news:
Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3
80 internet-exposed MongoDB database instances found in Bangladesh
