Advisories by BGD e-GOV CIRT

The investigated activity involved two compromised service principals. One primarily performed reconnaissance, while the second performed extensive di....

BGD e-GOV CIRT has reviewed recent reporting on a SideCopy campaign employing spear- phishing, weaponized Windows shortcut (.LNK) files, mshta.exe, mu....

The recovered toolkit included exploitation capability against GeoServer/GeoTools, Laravel Ignition, Apache Tomcat Manager and Redis, as well as weak-....

BGD e-GOV CIRT is issuing this advisory regarding an active social-engineering campaign in which threat actors use passkey, MFA, SSO and identity-veri....

NodeStealer has been tracked since 2023 as an information-stealing malware family targeting browser information and Facebook accounts. Previous versio....

This effectively turns the infected workstation into a proxy/pivot point inside the organization's trusted network. Microsoft specifically describes t....