InfoSecBulletin Cybersecurity for mankind
As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent cybersecurity alert, warning of heightened cyber threats due to reduced monitoring and operational oversight during the festive period.
Current Threat Landscape:
Citrix Released Emergency Patches for Actively Exploited CVE-2025-6543
SonicWall warns of a trojanized NetExtender stealing VPN logins
CVE-2025-36537
TeamViewer patched vuln allowing hacker SYSTEM Rights
Hacker Target 70+ Microsoft Exchange Servers to Steal Credentials with Keyloggers
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
The CIRT’s Cyber Threat Intelligence Unit has detected widespread malware activity across the nation. Notably:
Android.vo1d and Avalanche-Andromeda malware variants have infected over 370,000 IP addresses.
24,362 IP addresses were flagged as vulnerable in the past week alone.
These malware campaigns exploit common security gaps, including:
Weak authentication protocols
Outdated or unpatched software
Critical Remote Code Execution (RCE) vulnerabilities
Top Threats Identified:
Recent threat intelligence highlights include:
High infection rates across mobile and desktop platforms
Major vulnerabilities in systems lacking routine patching
Risk of ransomware, data breaches, and unauthorized access
Recommended Mitigation Measures:
Organizations in both public and private sectors are urged to act swiftly:
Maintain 24/7 monitoring of systems and network activities.
Update all security tools, including SIEM, IDS/IPS, and WAF systems.
Enforce VPN access only with Multi-Factor Authentication (MFA).
Block connections from untrusted or public networks.
Apply all critical software and system updates immediately.
Securely back up all critical data and validate recovery processes.
Follow InfoSecBulletin.com for continuous updates on cybersecurity threats and best practices.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
