Alleged India-linked espionage campaign targeted Pakistan, Bangladesh, Sri Lanka

Arctic Wolf attributes a year-long (starting January 2025) espionage campaign to an India-nexus actor dubbed SloppyLemming that targeted government, energy, telecom and logistics organizations in Pakistan, Bangladesh and Sri Lanka using spearphishing with malicious PDFs and Excel files that deployed the BurrowShell backdoor and keylogging/recon tools; the campaign staged malware across more than 100 Cloudflare domains and demonstrates moderate technical capability with inconsistent operational security.