DoNot (APT-C-35) Cyber-Espionage Campaign Targeting Bangladesh Military and Defence Personnel
The lure itself was customized around Bangladesh’s military environment. The malicious document used the biography of a Bangladesh Air Force officer a....
17-Aug-2026 12:00:00
Read Details
The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Targeting Bangladesh
The group operates a cross-platform, self-propagating encryptor that can independently spread across Windows, Linux, NAS, BSD, and VMware ESXi systems....
09-Aug-2026 15:00:00
Read Details
SideWinder Spear-Phishing Campaign Against Bangladesh Leveraging Dual-Format Weaponized Documents
SideWinder, a persistent advanced persistent threat (APT) group with suspected India-nexus affiliations, is conducting an active spear-phishing campai....
30-Jul-2026 15:00:00
Read Details
GoldFactory / GoldPickaxe - Biometric-Stealing Mobile Banking Trojan Targeting e-KYC & Digital Identity Systems
The current variant is distributed via a malicious domain spoofing KuaiBo, a prominent Chinese video-streaming and media-player application. Fake webs....
21-Jul-2026 11:00:00
Read Details
Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts
The OAuth 2.0 Device Authorization Grant ("device code flow") is a legitimate authentication mechanism designed for devices with limited input capabil....
13-Jul-2026 15:15:00
Read Details
AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns
The activity spans several delivery models, including phishing emails with urgent account or billing themes, adversary-in-the-middle token theft flows....
09-Jul-2026 11:00:00
Read Details