پاجیت کو یاد دلاتا چلوں افغان بھی گاۓ کا گوشت نوچ نوچ کر کھاتے ہیں
اور تو اور گاۓ کے معدے چاینا کو ایکسپورٹ کرتے ہیں
افعان اس کو لوکل زبان مے مٹوک کہتے ہیں
ماتا کی اتنی بے عزتی مے نے کھیں نھی دیکھی
#AfghanistanAndPakistan
TTP Faction Dispute Over Bannu Cash Van Robbery Surfaces
A TTP commander known as Saifullah alias Malyaar released a video message threatening two other commanders, Aryana Paindakhel and Nasir alias Gidar. He demanded they return their share of money looted from a cash van in Bannu, warning of serious consequences if they don’t comply.
According to TTP FAK sources, the group initially estimated the loot at 80 million rupees. After counting by banks, the total robbed amount was 160 million rupees.
The public disagreement suggests rising tensions between TTP subgroups, with internal clashes over the distribution of the money expected soon.
ISRAELIS ARE RAPING PALESTINIAN DETAINEES WITH DOGS. 🇮🇱
“A dog then raped me, penetrating my anus in a trained manner when I was being beaten.”
— A testimony of a Palestinian prisoner.
𝗪𝗛𝗔𝗧 𝗧𝗛𝗘 𝗔𝗖𝗧𝗨𝗔𝗟 𝗛𝗘𝗟𝗟.
A Palestinian farmer working his field in the occupied West Bank refused to leave for an armed Israeli settler.
So the settler took him hostage, blindfolded and humiliated him while IDF soldiers stood guard protecting the abuser.
اسرائیلی فوج ایک فلسطینی بچے کو زبردستی اغوا کرتے ہوئے
افسوس کی بات ہے اسرائیلی فوج کے مظالم فلسطینیوں پر روز بروز بڑھتے ہی چلے جا رہے ہیں اللہ تعالیٰ فلسطینوں پر اپنا رحم فرما🇵🇸
Here we have footage of an Israeli drone strike.
A deadly assault killing an Palestinian civilian in Gaza.
A man trying to bring home a sack of flour to feed his family....
لا أعتقد أن البشرية عبر كل تاريخ الحروب وثقت مشاهد كهذه.
مشهد تم الحصول عليه من كاميرا مراقبة في غزة، لح��ة سقوط صاروخ اسرائيلي بشكل مباشر على مجموعة من المواطنين العُزل (خلال حرب الابادة)
أحد المشاهد التي سيخلّدها التاريخ كواحدة من أكبر الجرائم في هذا الزمن.
#SideWinder#APT / #RazorTiger Targeting 🇵🇰 🇳🇵 🇧🇩 🇦🇫 Governments.
Infra [Government entities mimicking]:
94.126.224[.]99
mofa-go-np.direct880[.]net [Ministry of Foreign Affairs, Nepal]
mofa-gov-np.direct880[.]net [Ministry of Foreign Affairs, Nepal]
pakun-org.direct880[.]net [Permanent Mission of Pakistan to the United Nations]
www-fbr-gov-pk.direct880[.]net [Federal Board of Revenue, Pakistan]
geneva-mofa-gov-bd.direct880[.]net [Ministry of Foreign Affairs, Bangladesh]
www-securitycouncilreport-org[.]direct880[.]net [Targeting Afghanistan Govt.]
www.direct880[.]net
direct880[.]net
Below are associated malicious files used for Phishing campaign:
File: Afghanistan, March 2026 Monthly Forecast _ Security Council Report.pdf
MD5: dba2260f73884da6f274fe8246988e8c
C2: www-securitycouncilreport-org.direct880[.]net
File: importantadvisory.docx
MD5: 616fbbce1f4719c37e4e02e01605d3b1
C2: TCP 94.126.224[.]99:443 / mofa-gov-np.direct880[.]net
Notes:
1. Header Title of all the web pages originally in Malayalam (Indian Language), which translates in English is "The most important thing is to be happy".
2. It is exploiting #CVE-2017-0199 (RCE vulnerability in MS Office) using the malicious word file (importantadvisory.docx).
3. RTF (Rich Text Format) file used for the campaign is "Fontlayer.rtf". We may find additional campaign files by searching this RTF file using VT Enterprise account. Anyone having VT premium access can search and share additional infra here, if found.
#SideWinder #APT #Malware #ioc