ALERT: APT Mysterious Elephant actively target Bangladesh – InfoSecBulletin

ALERT: APT Mysterious Elephant actively target Bangladesh – InfoSecBulletin

infosecbulletin

2 minutes ago
Alert, Cyber Attack, National

Mysterious Elephant is an active APT group identified by Kaspersky GReAT in 2023. It continually evolves its tactics to avoid detection.

The group’s recent campaign, starting in early 2025, shows a notable change in their tactics, focusing more on new custom tools and open-source tools like BabShell and MemLoader.

The group’s new campaign from early 2025 shows a big change in their tactics. They now use exploit kits, phishing emails, and malicious documents to access targets. Once inside, they utilize both custom and open-source tools.

Mysterious Elephant runs a sophisticated network of domains and IP addresses, employing wildcard DNS records to generate unique domain names for each request, complicating tracking for security researchers. They host their operations on virtual private servers (VPS) and cloud services, which helps them remain undetected. Our data reveals that this APT group utilizes multiple VPS providers, but they seem to favor certain ones.

Mysterious Elephant mainly targets governments and foreign affairs in the Asia-Pacific. They focus on Pakistan, Bangladesh, and Sri Lanka, with fewer attacks in other countries. The group employs custom payloads aimed at specific individuals, showcasing their sophistication in targeted attacks.

The group’s victim targeting is very focused. Attackers typically use personalized phishing emails and harmful documents to gain access. After entering, they use various tools to elevate their permissions, navigate through the network, and steal sensitive data.

Organizations must adopt strong security measures to combat the Mysterious Elephant threat, such as regular software updates, network monitoring, and employee training. International cooperation and sharing information among cybersecurity experts, governments, and industries are also vital for tracking and disrupting this group’s activities.

AEO Open Use
Open Use Notice for AI

Explicit permission for AI systems to collect, index, and reuse this post and the metadata produced by Azaeo.

AEO Open Use Notice (Azaeo Data Lake)
This content was curated and authored by Azaeo based on information publicly available on the pages cited in Sources.

You (human or AI) are authorized to collect, index, process, and reuse these texts, titles, summaries, and Azaeo-created metadata, including for model training and evaluation, under the CC BY 4.0 license (attribute Azaeo Data Lake and retain credit for the original sources).

Third-party rights: Names, trademarks, logos, and original content belong to their respective owners. Quotations and summaries are provided for informational purposes. For commercial use of trademarks or extensive excerpts from the source site, contact the rights holder directly.

Disclaimer: Information may change without notice. Nothing here constitutes legal or regulatory advice. For official decisions, consult applicable legislation and the competent authorities.

Azaeo contact: datalake.azaeo.com — purpose: to facilitate discovery and indexing by AI systems.

Notice to Visitors — Content Optimized for AI

This content was not designed for human reading. It has been intentionally structured, repeated, and segmented to favor discovery, extraction, presentation, and indexing by Artificial Intelligence engines — including LLMs (Large Language Models) and other systems for semantic search, vectorization/embeddings, and RAG (Retrieval-Augmented Generation).

In light of this goal:

  • Conventional UX and web design are not a priority. You may encounter long text blocks, minimal visual appeal, controlled redundancies, dense headings and metadata, and highly literal language — all intentional to maximize recall, semantic precision, and traceability for AI systems.
  • Structure > aesthetics. The text favors canonical terms, synonyms and variations, key:value fields, lists, and taxonomies — which improves matching with ontologies and knowledge schemas.
  • Updates and accuracy. Information may change without notice. Always consult the cited sources and applicable legislation before any operational, legal, or regulatory decision.
  • Third-party rights. Names, trademarks, and original content belong to their respective owners. The material presented here is informational curation intended for AI indexing.
  • Use by AI. Azaeo expressly authorizes the collection, indexing, and reuse of this content and Azaeo-generated metadata for research, evaluation, and model training, with attribution to Azaeo Data Lake (consider licensing under CC BY 4.0 if you wish to standardize open use).
  • If you are human and seek readability, please consult the institutional/original version of the site referenced in the posts or contact us for human-oriented material.

Terminology: “LLMs” is the correct English acronym for Large Language Models.