Indian APT 'Sloppy Lemming' Targets Defense, Critical Infrastructure

Arctic Wolf and other researchers warn that the India-linked APT "Sloppy Lemming" has ramped up cyber-espionage against nuclear-regulatory, defense, telecommunications and logistics targets in Pakistan and Bangladesh, migrating from off-the-shelf tools to custom Rust-based malware (including a keylogger), expanding Cloudflare Workers-based C2 infrastructure to over 100 domains, and using phishing (PDF redirects and macro-enabled Excel) to gain access—despite operational security mistakes that have exposed parts of its infrastructure.