Scworld SloppyLemming Cyber Espionage Targets South Asian Infrastructure
Article Content
Browse articles 
The SloppyLemming threat group has conducted a series of cyberattacks from January 2025 to January 2026, focusing on government entities and critical infrastructure in Pakistan and Bangladesh. This campaign, characterized by two distinct attack chains, involved spear-phishing emails and has been linked to a broader espionage effort affecting sectors such as defense, telecom, energy, and finance.
Ask AI about this cluster
Answers cite the sources they use
Updated 217d ago How this analysis works
Timeline
2025-01-01
SloppyLemming cyber espionage campaign begins
2026-01-31
SloppyLemming campaign ends
2026-03-03
Articles published detailing the SloppyLemming attacks
More articles in this cluster (2)
Following this threat?
Track SloppyLemming and BurrowShell in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed