An India-nexus threat actor operated an extensive cyber espionage campaign deploying BurrowShell and Rust-Based RAT, targeting government entities and critical infrastructure operators in Pakistan and Bangladesh. Arctic Wolf has been tacking the campaign conducted by “SloppyLemming” over the last 12 month. Arctic Wolf said, the campaign impersonated Pakistani and Bangladeshi …
Read More »BurrowShell Backdoor Found
AI-Powered “iCyberHunt” explores Bangladeshi market
Brotecs, a leading in R&D company introducing a cyber security products “iCyberHunt” in Bangladesh market. iCyberHunt is an AI-powered security platform delivering Zero Trust access, threat intelligence, and end-to-end protection for networks, cloud, endpoints, and IoT—ensuring uninterrupted, scalable defense. Its enterprise-grade feature protects the entire digital ecosystem-network, endpoints, users, and …
Read More »
CIRT Alert
35 unique IP vulnarable via n8n (CVE:2026-21858) instances in Bangladesh
A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments. Affected versons: • n8n self-hosted instances running versions 1.65.0 to below …
Read More »Summit group to develop its 1st data center in Bangladesh
Bangladeshi conglomerate Summit Group is entering Bangladesh’s rapidly growing data center market and plans to start working with an external business partner within a year, its chairman told in a recent interview. The first data center would utilize the gas generation capacity of Summit Power International, the group’s energy arm …
Read More »FortiWeb Devices in Bangladesh Exploited via CVE-2025-55182 to Deploy Sliver C2
Threat researchers found a sophisticated attack campaign aimed at FortiWeb firewalls worldwide, using the Sliver C2 framework for ongoing access and hidden proxy setups. Analyzing exposed Silver C2 databases and logs during open-directory threat hunting on Censys revealed a coordinated attack exploiting vulnerabilities in outdated FortiWeb devices. The threat actor …
Read More »How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks
There are currently millions of fake IMEI numbers in Bangladesh’s network. Such as “111111111111”, “0000000000000”, “99999999999999” and similar patterns. According to the Special Assistant to the Chief Advisor of the Interim Government of Bangladesh Faiz Taiyeb Ahmad, millions of citizens are using low-quality fake phones. These phones have never undergone …
Read More »BTRC NEIR face 2.4 million bot traffic in a minute
BTRC’s National equipment identity register (NEIR) Citizen Portal is under attack by 2.4 million bot traffic in a minute. The attackers have been carrying out this attack intermittently since Friday morning. Aminul Bari Shuvro, Chief Solution Officer of Synesis IT (responsible for NEIR) said that forty thousand bot traffic hit …
Read More »80 internet-exposed MongoDB database instances found in Bangladesh
BGD e-GOV CIRT found 80 insecure MongoDB databases in Bangladesh exposed online, affected by the CVE-2025-14847 vulnerability (MongoBleed). This critical flaw allows remote attackers to access sensitive server data when zlib compression is enabled. MongoDB is often used to store personal, financial, and operational information. This exposure poses significant risks …
Read More »TechnoNext successfully host “Cyber invasion 2025”
TechnoNext powered onsite cybersecurity competition “Cyber Invasion 2025” was successfully held on Saturday (13.12.2025) in the head office of the company at Dhaka with the participation from students and professionals across the country. The event began with an online qualifying round, which received an overwhelming 720 registrations from aspiring cybersecurity …
Read More »Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3
According to Cloudflare’s report, Bangladesh has risen in the 3rd largest global source of DDoS attacks in 2025 Q3. Seven of the top ten sources of DDoS attacks are in Asia, with Indonesia being the highest. Indonesia has been the leading source since 2024 Q3 and has consistently ranked high …
Read More »
InfoSecBulletin Cybersecurity for mankind