The government and Bangladesh Telecommunication Regulatory Commission (BTRC) have received credible information that some companies of Bangladesh Internet Service Providing (ISP) sector are trying to destroy the networks and businesses of rival ISPs through DDoS (Distributed Denial of Service) attacks organized from abroad according to Faiz Ahmad Taiyeb adviser (Ministry …
Read More »APT SideWinder Actively Targeting Bangladesh With ClickOnce-Based Attack
Trellix Advanced Research Center (ARC) found a campaign targeting a European embassy in New Delhi, India. Further investigation uncovered multiple targeted institutions across Sri Lanka, Pakistan, and Bangladesh. This report analyzes the tactics used by SideWinder, an APT group known for espionage in Asia. The investigation shows that SideWinder has …
Read More »
(CVE-2025-59287)
CIRT Alert RCE Vulnerability in Microsoft WSUS in Bangladesh
Bangladesh cyber security watchdog BGD e-GOV CIRT published an advisory (27.10.2025) regarding critical romote code execution vulnarability in Microsoft WSUS CVSS score 9.8 as per NVD, NIST. CIRT has detected a serious security flaw in Microsoft’s WSUS that could let an attacker fully control a WSUS server. This vulnerability not …
Read More »ALERT: APT Mysterious Elephant actively target Bangladesh
Mysterious Elephant is an active APT group identified by Kaspersky GReAT in 2023. It continually evolves its tactics to avoid detection. The group’s recent campaign, starting in early 2025, shows a notable change in their tactics, focusing more on new custom tools and open-source tools like BabShell and MemLoader. The …
Read More »Prime Bank Implements DNSSEC for .com.bd Domain: 1st BFSI Sector in BD
Prime Bank PLC is leading the way in enhancing digital security in Bangladesh’s Banking, Financial Services, and Insurance (BFSI) sector by implementing DNS Security Extensions (DNSSEC) for its .com.bd domain. Prime Bank is the first bank in .com.bd to implement DNSSEC, showcasing its commitment to taking proactive cybersecurity measures. As …
Read More »All airports in Bangladesh are on alert amid cyber attack
A special alert has been issued at all international and domestic airports in Bangladesh due to the threat of cyber attacks. At the same time, 10 special instructions have been given to the airports. A letter of this instruction, signed by Air Commodore Abu Sayeed Mehboob Khan, Member (Planning and …
Read More »Fraudsters swipe Tk 27 lakh from SCB cardholders
An organised racket has reportedly siphoned off lakhs from Standard Chartered Bangladesh’s (SCB) credit card holders, raising serious cybersecurity concerns. According to a Bangladesh Bank source, a total of Tk27 lakh was siphoned from the credit cards of 54 customers of Standard Chartered Bangladesh during the last week of August. …
Read More »Hacker claim to breach Link3; 189,000 Users data up for sale
A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The data has been put up for sale on a dark web forum. According to the forum post: Link3 is the largest ISP in the country by active subscribers, offering essential …
Read More »“SikkahBot” Malware targets “bKash” “Nagad” “MYGP” “DBBL” with banking users in Bangladesh
A new Android malware called SikkahBot is targeting students in Bangladesh by pretending to be official apps from the Bangladesh Education Board. Cyble Research and Intelligence Labs (CRIL) found that this malware has been active since July 2024. According to CRIL, the SikkahBot malware is distributed through shortened URLs, including …
Read More »South Asian APT to Compromise Phones of Military-linked Individuals In Bangladesh
A sophisticated South Asian APT group is conducting a widespread espionage campaign against military personnel and defense organizations in Sri Lanka, Bangladesh, Pakistan, and Turkey. Threat actors are using a multi-stage attack strategy that combines phishing with new Android malware to target the mobile devices of military-related individuals. The campaign …
Read More »
InfoSecBulletin Cybersecurity for mankind