Skip to content
Black Lotus Labs

Black Lotus Labs

www.lumen.com • October 28, 2026

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast.

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast.

What is Black Lotus Labs®?

What is Black Lotus Labs®?

See how Black Lotus Labs helps protect your business (1:52)

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to help you stay on top of emerging threats.

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to help you stay on top of emerging threats.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Products supported with Rapid Threat Defense

Maximize efficiency with automated defense and proactively protect your critical assets against harmful cyberthreats. Learn how you can put Rapid Threat Defense to work for your business.

Maximize efficiency with automated defense and proactively protect your critical assets against harmful cyberthreats. Learn how you can put Rapid Threat Defense to work for your business.

Taking the crossroads: The Versa Director zero‑day exploitation

Understand the implications of the latest zero‑day vulnerability in Versa Director servers, how state‑ threat actors are exploiting it and steps you can take to mitigate potential risks to your network.

Taking the crossroads: The Versa Director zero‑day exploitation

Understand the implications of the latest zero‑day vulnerability in Versa Director servers, how state‑ threat actors are exploiting it and steps you can take to mitigate potential risks to your network.

What people are saying

Understand the top trends shaping today’s threat landscape and learn how to protect your organization.

Understand the top trends shaping today’s threat landscape and learn how to protect your organization.

Black Lotus Labs X/Twitter – Latest in threats and prevention

Defenders of a clean internet: Black Lotus Labs live Q&A

Black Lotus Labs Github – Archive of code and research

Black Lotus Labs X/Twitter – Latest in threats and prevention

Defenders of a clean internet: Black Lotus Labs live Q&A

Black Lotus Labs Github – Archive of code and research

KV‑botnet: Don’t call it a comeback

Routers roasting on an open firewall: the KV-botnet investigation

Black Lotus Labs blog archive

HiatusRAT takes little time off in a return to action

KV‑botnet: Don’t call it a comeback

Routers roasting on an open firewall: the KV-botnet investigation

Black Lotus Labs blog archive

HiatusRAT takes little time off in a return to action

Routers from the underground: exposing AVrecon

Qakbot: retool, reinfect, recycle

New HiatusRAT router malware covertly spies on victims

Routers from the underground: exposing AVrecon

Qakbot: retool, reinfect, recycle

New HiatusRAT router malware covertly spies on victims

The key to identifying and thwarting threats: network visibility

The key to identifying and thwarting threats: network visibility

DDoS Mitigation Service

DDoS Mitigation Solutions

Adaptive Network Security

DDoS Mitigation Service

DDoS Mitigation Solutions

Adaptive Network Security

Questions? Let’s talk.

our team to get the assistance and answers you’re looking for.

Questions? Let’s talk.

our team to get the assistance and answers you’re looking for.

Request a Sales callback

Request a Sales callback

Request a Sales callback

Call Sales 800‑871‑9244

Call Sales 800‑871‑9244

Call Sales 800‑871‑9244

All third-party trademarks, service marks, names of products or services, used or mentioned herein belong to their respective owners.

Extracted Entities

Attack Types (2)

Platforms (1)