Black Lotus Labs®

Discover how Lumen cybersecurity experts and advanced threat technology identify and eliminate threats fast with detailed analyses by Black Lotus Labs®, the Lumen threat intelligence team.

A business professional in a green turtleneck sits at their desk, looking intently at the desktop in front of them. There is a large, blurred screen in the background, showing code that spans the wall.

Sept 22, 2026

Threat Intelligence Gives Security Data Meaning

Harry Rossoff

Learn about cyberthreat intelligence and how Black Lotus Labs uses proprietary network visibility and third-party intelligence sources to not only identify threats but provide the intelligence that enables teams to act on that information.

A view of the operations behind the publish and subscribe system that the attacker uses to control victims through the MQTT communications protocol.

September 15, 2026

The banana stand: brokering and managing infections across Asia using MQTT

Black Lotus Labs

Early detection of BambooToken’s MQTT C2 can help security teams uncover stealthy malware before threats spread. Learn why you should act now.

A view of a large supply warehouse named "Proxy Supply ltd." The warehouse looks well maintained, there is a flagpole in the parking lot with the symbol of a typhoon on the flag

August 26, 2026

Inside China-nexus cyber espionage infrastructure

Black Lotus Labs

Black Lotus Labs and the FBI uncovered China-nexus infrastructure used to hide cyber espionage, showing how early detection helps protect customers.

RCM Technologies security operations team monitoring global systems with Lumen infrastructure.

Aug 24, 2026

Unified security across regulated industries with Lumen

Lumen Customer Stories Team

Lumen Defender AMDR with Microsoft Sentinel

Vintage-style robots working on a farm tend a field of electronic devices instead of crops, including televisions, routers, cameras and other technology growing in garden rows. A sign in the foreground reads, “PROXY FARM – Attractive Prices! No Rules!” A red barn, windmill and silo stand in the background.

July 24, 2026

Inside the growing residential proxy botnet threat

Black Lotus Labs

Residential proxy networks are growing as malicious botnets enable fraud, evade defenses and quickly rebuild. Learn how and why they’re a problem.

Black Lotus Labs thumbnail

June 10, 2026

JDY Botnet: How IoT and SOHO Devices Are Exploited

Black Lotus Labs

Read articles from Black Lotus Labs, the Threat Research and Operations team at Lumen.

Show More