InfoSecBulletin Cybersecurity for mankind
As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent cybersecurity alert, warning of heightened cyber threats due to reduced monitoring and operational oversight during the festive period.
Current Threat Landscape:
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
The CIRT’s Cyber Threat Intelligence Unit has detected widespread malware activity across the nation. Notably:
Android.vo1d and Avalanche-Andromeda malware variants have infected over 370,000 IP addresses.
24,362 IP addresses were flagged as vulnerable in the past week alone.
These malware campaigns exploit common security gaps, including:
Weak authentication protocols
Outdated or unpatched software
Critical Remote Code Execution (RCE) vulnerabilities
Top Threats Identified:
Recent threat intelligence highlights include:
High infection rates across mobile and desktop platforms
Major vulnerabilities in systems lacking routine patching
Risk of ransomware, data breaches, and unauthorized access
Recommended Mitigation Measures:
Organizations in both public and private sectors are urged to act swiftly:
Maintain 24/7 monitoring of systems and network activities.
Update all security tools, including SIEM, IDS/IPS, and WAF systems.
Enforce VPN access only with Multi-Factor Authentication (MFA).
Block connections from untrusted or public networks.
Apply all critical software and system updates immediately.
Securely back up all critical data and validate recovery processes.
Follow InfoSecBulletin.com for continuous updates on cybersecurity threats and best practices.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
