Back Gbhackers

SloppyLemming Espionage Campaign Targets Pakistan, Bangladesh with BurrowShell Backdoor and Rust RAT

Gbhackers •Mayura Kathir • March 3, 2026

SloppyLemming, an India-linked espionage group also known as Outrider Tiger and Fishing Elephant, has run a year-long cyber campaign against high‑value targets in Pakistan and Bangladesh using a new BurrowShell backdoor and a Rust-based remote access tool (RAT). This activity builds directly on earlier operations exposed by Cloudflare’s CloudForce One in 2024. However, it shows […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SloppyLemming Espionage Campaign Targets Pakistan and Bangladesh with New Tools SloppyLemming, an India-linked espionage group, has conducted a year-long cyber campaign against high-value targets in Pakistan and Bangladesh. The campaign utilizes a new BurrowShell backdoor and a Rust-based remote access tool (RAT), building on operations previously exposed in 2024. This activity highlights the ongoing threat posed by this group in the region. 3 sources 42

Extracted Entities

SloppyLemming Espionage Campaign Targets Pakistan, Bangladesh with BurrowShell Backdoor and Rust RAT

The full story

Extracted Entities

APT Groups (3)

Attack Types (1)

Campaigns (1)

Countries (2)

Malware (2)