HAZY_TIGER__2022__Cisco_Talos_Intelligence_Group_-_Comprehensive_Threat_Intelligence_Bitter_APT_adds_Bangladesh_to_their_targets.pdf

Cisco Talos describes an ongoing Bitter APT campaign (since Aug 2021) targeting Bangladeshi government personnel via spear-phishing attachments (weaponized RTF/Excel) that exploit known Microsoft Office vulnerabilities to install a downloader trojan named "ZxxZ" which provides remote file execution and fetches additional payloads; the report includes infrastructure, IOCs (domains, URLs, SSL thumbprints), detailed malware analysis, exploitation chains, and mitigation recommendations.