Wednesday , October 28 2026
arrested
AI generated

NID, Bank Info, SMS Lists on Sale via Android App: Young Programmer Arrested in BD

Md. Arman Hossain, 22, has been arrested. He is a student of Computer Science and Engineering (CSE) at a private university. He was caught in a raid in the Manikdi area near the Cantonment Police Station on Tuesday (May 5). The CID’s Cyber Police Center (CPC) shared this news on Thursday (May 7).

According to the CID, In October last year, the Cyber Monitoring Cell found out that NID data, SMS lists, and bank and MFS account info were being sold in a Facebook ad. Because of this, two people were arrested: Siam Hawlader from Laxmipur and later Al-Amin from Koyra, Khulna. With their help, they found out that the main person behind this was Arman.

Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE

Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone...
Read More
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE

CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV)...
Read More
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Daily Cyber security update for 26.10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 26.10. 2026

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
The Washington Post report  Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

Daily Cyber security update for 25. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 25. 10. 2026

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

The officials involved in the investigation said that Arman is a skilled programmer. He used this skill to make an Android app and website called ‘Sab Ekhna’. While other gang members did the marketing, Arman took care of the technical part. The gang gathered information illegally from secret databases nationwide and sold it through this app for money.

Three mobile phones, six SIM cards (three were bKash Merchant SIMs), and a laptop were taken from Arman when he was arrested. In the first questioning, Arman said he got this sensitive information via WhatsApp with help from a certain group.

CID Special Superintendent of Police (Media) Jasim Uddin Khan said that the arrested accused has been sent to the court with a remand application.

Investigations are underway to reveal who else is involved in this gang and where the source of the information leak is. CID has advised the general public to be awere of such online offers.

CID officials said they are still investigating to find the whole network involved in the illegal data trade and to trace where the leak started. Authorities think more people might be part of this operation, raising big questions about how private national information is accessed and shared. This incident shows again the increasing dangers of cybersecurity and the safety of personal data in Bangladesh. Experts advise that people should be careful when using unknown apps, websites, or online deals that might collect or misuse sensitive information.

Check Also

Incident Reporting

Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)

In an important move to boost the country’s cybersecurity, Bangladesh started the Cyber Incident Reporting …