Malware
BurrowShell
- First Reported
- Mar 3, 2026
- Latest Reported
- Mar 4, 2026
Reported Context (3)
- The report highlights deployment of a custom x64 implant, BurrowShell, sophisticated delivery chains, and resilient infrastructure designed for persistence and evasion. Arctic Wolf Reports Sloppy Lemming Espionage Campaign Targeting Pakistan and Bangladesh
- and critical infrastructure in Pakistan and Bangladesh that used two attack chains to deploy BurrowShell and a Rust-based keylogger. Arctic Wolf Links SloppyLemming to Dual-Malware Campaign in Pakistan and Bangladesh
- attributed the year-long operation to an India-nexus actor dubbed SloppyLemming, which deployed the BurrowShell backdoor and Excel-based keyloggers to capture screenshots, harvest credentials and perform Arctic Wolf Attributes Espionage Campaign Targeting Pakistan, Bangladesh and Sri Lanka to SloppyLemming
Malware (3)
Threat Actors (4)
MITRE ATT&CK (13)
Vendors (2)
Products (4)
Tools (2)
Industries (6)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.