Bangladeshi conglomerate Summit Group is entering Bangladesh’s rapidly growing data center market and plans to start working with an external business partner within a year, its chairman told in a recent interview. The first data center would utilize the gas generation capacity of Summit Power International, the group’s energy arm …
Read More »FortiWeb Devices in Bangladesh Exploited via CVE-2025-55182 to Deploy Sliver C2
Threat researchers found a sophisticated attack campaign aimed at FortiWeb firewalls worldwide, using the Sliver C2 framework for ongoing access and hidden proxy setups. Analyzing exposed Silver C2 databases and logs during open-directory threat hunting on Censys revealed a coordinated attack exploiting vulnerabilities in outdated FortiWeb devices. The threat actor …
Read More »How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks
There are currently millions of fake IMEI numbers in Bangladesh’s network. Such as “111111111111”, “0000000000000”, “99999999999999” and similar patterns. According to the Special Assistant to the Chief Advisor of the Interim Government of Bangladesh Faiz Taiyeb Ahmad, millions of citizens are using low-quality fake phones. These phones have never undergone …
Read More »BTRC NEIR face 2.4 million bot traffic in a minute
BTRC’s National equipment identity register (NEIR) Citizen Portal is under attack by 2.4 million bot traffic in a minute. The attackers have been carrying out this attack intermittently since Friday morning. Aminul Bari Shuvro, Chief Solution Officer of Synesis IT (responsible for NEIR) said that forty thousand bot traffic hit …
Read More »80 internet-exposed MongoDB database instances found in Bangladesh
BGD e-GOV CIRT found 80 insecure MongoDB databases in Bangladesh exposed online, affected by the CVE-2025-14847 vulnerability (MongoBleed). This critical flaw allows remote attackers to access sensitive server data when zlib compression is enabled. MongoDB is often used to store personal, financial, and operational information. This exposure poses significant risks …
Read More »TechnoNext successfully host “Cyber invasion 2025”
TechnoNext powered onsite cybersecurity competition “Cyber Invasion 2025” was successfully held on Saturday (13.12.2025) in the head office of the company at Dhaka with the participation from students and professionals across the country. The event began with an online qualifying round, which received an overwhelming 720 registrations from aspiring cybersecurity …
Read More »Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3
According to Cloudflare’s report, Bangladesh has risen in the 3rd largest global source of DDoS attacks in 2025 Q3. Seven of the top ten sources of DDoS attacks are in Asia, with Indonesia being the highest. Indonesia has been the leading source since 2024 Q3 and has consistently ranked high …
Read More »bdNOG 20 Concludes with technical deep dives in Sylhet
bdNOG 20th conference successfully held in Sylhet with huge number of participations from home and abroad. The 4 days conference include technical session, keynote speech Q&A and so on Co-hosted by Internet service provider of Bangladesh (ISPAB). On the title “Optimizing DNS Performance in Kubernetes: Challenges and Best Practices” Md …
Read More »“Herodotus” Android Banking Malware Attacks Evading Traditional Antivirus
A new Android banking Trojan called Herodotus has emerged recently. It is offered as Malware-as-a-Service (MaaS) and pretends to be a legitimate app to trick users into installing an APK. After installation, it requests sensitive permissions and can control the device for banking transactions. A modern mobile attack, yet once …
Read More »BIND9 DNA Cache poisoning impact 267 IPs in Bangladesh
BIND9 DNA Cache poisoning impact 267 IPs in Bangladesh via CVE: 2025-40778. The high severity flaw can allow remote attackers to inject forged DNS records into resolver caches. BGD e-GOV CIRT published an advisory stating all organizations operating BIND 9 resolvers in Bangladesh (ISPs, data centers, government, enterprises) must upgrade …
Read More »
InfoSecBulletin Cybersecurity for mankind