SloppyLemming targeted Pakistan and Bangladesh with BurrowShell, a Rust keylogger, and 112 Cloudflare Workers domains in 2025–2026.
Two days to a working application. Three minutes to a live hotfix. Fifty thousand lines of code with comprehensive tests.