SloppyLemming Deploys BurrowShell and Rust-Based RAT to Target Pakistan and Bangladesh

Summary Between January 2025 and January 2026, Arctic Wolf tracked an extensive cyber espionage campaign that we assess was conducted by SloppyLemming (also known as Outrider Tiger and Fishing Elephant), an India-nexus threat actor, targeting government entities and critical infrastructure operators in Pakistan and Bangladesh. To our knowledge, this report documents previously unreported tooling, infrastructure, … Continue reading SloppyLemming Deploys BurrowShell and Rust-Based RAT to Target Pakistan and Bangladesh