Back Cybersecuritynews

SloppyLemming Espionage Campaign Uses BurrowShell Backdoor and Rust RAT to Hit Pakistan and Bangladesh Targets

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

A suspected India-aligned threat group known as SloppyLemming has been conducting a sustained espionage campaign against government agencies, defense organizations, nuclear oversight bodies, and critical infrastructure operators in Pakistan and Bangladesh. Active since 2021 and also tracked as Outrider Tiger and Fishing Elephant, the group deployed two newly documented tools between January 2025 and January […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SloppyLemming Espionage Campaign Targets Pakistan and Bangladesh with New Tools SloppyLemming, an India-linked espionage group, has conducted a year-long cyber campaign against high-value targets in Pakistan and Bangladesh. The campaign utilizes a new BurrowShell backdoor and a Rust-based remote access tool (RAT), building on operations previously exposed in 2024. This activity highlights the ongoing threat posed by this group in the region. 3 sources 42

Extracted Entities

SloppyLemming Espionage Campaign Uses BurrowShell Backdoor and Rust RAT to Hit Pakistan and Bangladesh Targets

The full story

Extracted Entities

APT Groups (3)

Attack Types (1)

Campaigns (1)

Countries (2)

Industries (1)

Malware (2)