Click here to download all references as Bib-File.•
| 2026-08-26
⋅
Lumen
⋅
The infrastructure quartermaster: inside a China-nexus state enablement model |
| 2026-08-26
⋅
Github (blacklotuslabs)
⋅
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs) |
| 2026-06-10
⋅
Github (blacklotuslabs)
⋅
Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation (IOCs) KV |
| 2026-04-08
⋅
Black Lotus Labs
⋅
FrostArmada: All thriller, no (malware) filler |
| 2026-04-07
⋅
Black Lotus Labs
⋅
FrostArmada: All thriller, no (malware) filler |
| 2026-03-10
⋅
Lumen
⋅
Silence of the hops: The KadNap botnet KadNap |
| 2025-09-18
⋅
Lumen
⋅
SystemBC – Bringing the Noise SystemBC SystemBC |
| 2025-05-09
⋅
Lumen
⋅
Classic Rock: Hunting a Botnet that preys on the Old |
| 2025-01-23
⋅
Lumen
⋅
The J-Magic Show: Magic Packets and Where to find them J-Magic SEASPY |
| 2024-12-04
⋅
Lumen
⋅
Snowblind: The Invisible Hand of Secret Blizzard Crimson RAT TwoDash |
| 2024-11-19
⋅
Lumen
⋅
One Sock Fits All: The Use And Abuse Of The NSOCKS Botnet Ngioweb Ngioweb |
| 2024-09-18
⋅
Lumen
⋅
Derailing the Raptor Train Nosedive |
| 2024-09-18
⋅
Lumen
⋅
Derailing The Raptor Train Nosedive |
| 2024-08-27
⋅
Github (blacklotuslabs)
⋅
Taking the Crossroads: The Versa Director Zero-Day Exploitation (IOCs) VersaMem |
| 2024-08-27
⋅
Lumen
⋅
Taking the Crossroads: The Versa Director Zero-Day Exploitation VersaMem |
| 2024-05-30
⋅
Lumen
⋅
The Pumpkin Eclipse Chalubo |
| 2024-05-30
⋅
Centurylink
⋅
The Pumpkin Eclipse Chalubo |
| 2024-02-07
⋅
Lumen
⋅
KV-Botnet: Don’t call it a Comeback KV |
| 2023-12-13
⋅
Github (blacklotuslabs)
⋅
Routers Roasting on an Open Firewall: the KV-botnet investigation (IOCs) KV |
| 2023-12-13
⋅
Lumen
⋅
Routers Roasting on an Open Firewall: the KV-botnet Investigation KV |