Security NewsMediumIncidentunauthorized access
SloppyLemming Targets Pakistan and Bangladesh Governments Using Dual Malware Chains
UnknownMar 3, 2026(18 days ago)
SloppyLemming targets Pakistan and Bangladesh governments with BurrowShell and Rust-based malware via two distinct attack chains.
The threat activity cluster known as SloppyLemming has been attributed to a fresh set of attacks targeting government entities and critical infrastructure operators in Pakistan and Bangladesh. The activity, per Arctic Wolf, took place between January 2025 and January 2026. It involves the use of two distinct attack chains to deliver malware families tracked as BurrowShell and a Rust-based