Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-01-23 ⋅ Lumen ⋅ Black Lotus Labs
The J-Magic Show: Magic Packets and Where to find them
J-Magic SEASPY
2024-12-04 ⋅ Lumen ⋅ Black Lotus Labs, Danny Adamitis, Ryan English
Snowblind: The Invisible Hand of Secret Blizzard
Crimson RAT TwoDash
2024-11-19 ⋅ Lumen ⋅ Black Lotus Labs
One Sock Fits All: The Use And Abuse Of The NSOCKS Botnet
Ngioweb Ngioweb
2024-09-18 ⋅ Lumen ⋅ Black Lotus Labs
Derailing the Raptor Train
Nosedive
2024-09-18 ⋅ Lumen ⋅ Black Lotus Labs
Derailing The Raptor Train
Nosedive
2024-08-27 ⋅ Lumen ⋅ Black Lotus Labs
Taking the Crossroads: The Versa Director Zero-Day Exploitation
VersaMem
2024-05-30 ⋅ Lumen ⋅ Black Lotus Labs
The Pumpkin Eclipse
Chalubo
2024-05-30 ⋅ Centurylink ⋅ Black Lotus Labs
The Pumpkin Eclipse
Chalubo
2024-02-07 ⋅ Lumen ⋅ Black Lotus Labs
KV-Botnet: Don’t call it a Comeback
KV
2023-12-13 ⋅ Lumen ⋅ Black Lotus Labs
Routers Roasting on an Open Firewall: the KV-botnet Investigation
KV
2023-11-14 ⋅ Lumen ⋅ Black Lotus Labs
Taking The Elevator Down To Ring 0
Elevator
2023-08-17 ⋅ Lumen ⋅ Black Lotus Labs
No Rest For The Wicked: HiatusRAT Takes Little Time Off In A Return To Action
HiatusRAT
2023-07-27 ⋅ X (@BlackLotusLabs) ⋅ Black Lotus Labs
Tweet on update on AVrecon bot's migration to new infrastructure
AVrecon
2023-07-12 ⋅ Lumen ⋅ Black Lotus Labs
Routers From The Underground: Exposing AVrecon
AVrecon
2023-06-01 ⋅ Lumen ⋅ Black Lotus Labs
Qakbot: Retool, Reinfect, Recycle
QakBot
2023-03-06 ⋅ Lumen ⋅ Black Lotus Labs
New HiatusRAT Router Malware Covertly Spies On Victims
HiatusRAT
2022-09-28 ⋅ Lumen ⋅ Black Lotus Labs
Chaos Is A Go-Based Swiss Army Knife Of Malware
Chaos Kaiji
2022-09-27 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
Chaos Is A Go-Based Swiss Army Knife Of Malware (IOCs)
2022-06-28 ⋅ Lumen ⋅ Black Lotus Labs
ZuoRAT Hijacks SOHO Routers To Silently Stalk Networks
ZuoRAT Cobalt Strike
2022-03-08 ⋅ Lumen ⋅ Black Lotus Labs
What Global Network Visibility Reveals about the Resurgence of One of the World’s Most Notorious Botnets
Emotet
2021-09-16 ⋅ Lumen ⋅ Black Lotus Labs
No Longer Just Theory: Black Lotus Labs Uncovers Linux Executables Deployed as Stealth Windows Loaders
PrivetSanya Meterpreter
2021-08-11 ⋅ Lumen ⋅ Black Lotus Labs
ReverseRat Reemerges With A (Night)Fury New Campaign And New Developments, Same Familiar Side-Actor
ReverseRAT
2021-06-22 ⋅ Lumen ⋅ Black Lotus Labs
Suspected Pakistani Actor Compromises Indian Power Company with New ReverseRat
ReverseRAT
2020-11-20 ⋅ DomainTools ⋅ Black Lotus Labs, Joe Slowik, Lumen
Current Events to Widespread Campaigns: Pivoting from Samples to Identify Activity
2020-10-12 ⋅ Lumen ⋅ Black Lotus Labs
A Look Inside The TrickBot Botnet
TrickBot
2020-07-01 ⋅ Centurylink ⋅ Black Lotus Labs
Alina Point of Sale Malware Still Lurking in DNS
Alina POS
2020-04-13 ⋅ Centurylink ⋅ Black Lotus Labs
New Mozi Malware Family Quietly Amasses IoT Bots
Mozi
2019-01-31 ⋅ Lumen ⋅ Black Lotus Labs
A New Phase Of TheMoon
TheMoon
2018-11-15 ⋅ Centurylink ⋅ LabsBlack Lotus Labs
Mylobot Continues Global Infections
MyloBot