Educate, Empower, Secure: Building a Cyber-safe Bhutan
Services We Provide
Bhutan Computer Incident Response Team (BtCIRT) is a part of the Government Technology Agency (GovTech). The BtCIRT is mandated to enhance cyber security in Bhutan by facilitating collaboration and information exchange among stakeholders, rendering assistance in capacity building and through sustained advocacy in computer security. Click here to learn more
Incident
Analysis
Security Event
Monitoring
Security
Awareness
Report Cybersecurity Incident
BtCIRT encourages the reporting of cybersecurity incidents as it enables us to better understand the scope and nature of cyber incidents in Bhutan. This will enable us to issue alerts or advisories on relevant threats, and assist a broader range of individuals and organisations.
Advisories
Active Global Malware Campaign Abusing Compromised WhatsApp Accounts to Distribute Malicious VBScript Files
A new malware campaign is spreading through WhatsApp Desktop and WhatsApp Web. Attackers hijack a WhatsApp account and use it to quietly send an infected ...
Read More →
Fake Telegram Channel Alert
Fake Telegram Channel Alert The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division, GovTech Agency, earnestly urges the general public to remain vigilant and avoid ...
Read More →
Security Advisory on supply chain attack targeting axios javascript package
A recent supply chain attack involving the widely used axios library has raised significant security concerns across the JavaScript ecosystem. Third-party researchers identified that Axios ...
Read More →
Advisory: Steps to Recover Google Account (if your recovery phone and email has been changed)
PreparationTo increase your chances of proving ownership, use a device (phone, laptop, or browser) that you have previously used to log into the account. Ensure ...
Read More →
Advisory: Banking Fraud via. Email Compromise
BtCIRT has been reported of multiple incidents involving the compromise of Gmail accounts that are linked to bank accounts of customers in Bhutan. In these ...
Read More →
Global Cyber Security News
- Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption
- ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell
- Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates
- SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits
- Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
Vulnerability Notification
- VU#529388: Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sys
- VU#725167: node-forge Signature Forgery Vulnerabilities in RSA-PKCS and ED25519 Implementations
- VU#564823: GNU Wget enables SSRF via unvalidated FTP PASV IPs
- VU#152953: PayRange Android app version 7.0.7 contains multiple vulnerabilities
- VU#734812: Xerte Online Toolkit contains an authentication bypass that allows for RCE
Publications
REQUEST for EXPRESSION OF INTEREST(REoI) FOR (CONSULTING SERVICES – FIRMS SELECTION)
The GovTech Agency would like to invite eligible and interested Consulting Firms for the National Cybersecurity Risk Assessment deployment. Interested firms can submit Expression of ...
Read More →
17thDecember related Scams Alert
The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division GovTech Agency earnestly urges the general public to remain vigilant and avoid falling victim to National ...
Read More →
Cyber Security Awareness
Cyber Security Awareness Program The Department of Information Technology and Telecom, in its efforts to help promote conducive and safer cyber environment for work and ...
Read More →
National Cybersecurity Strategy of Bhutan
The Published National Cybersecurity Strategy of Bhutan for the year 2024 to 2029
Read More →