BLACK LOTUS LABS

See more threats, and stop more attacks.

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast.

EXPLORE SOLUTIONS CONTACT US

BLACK LOTUS LABS

See more threats, and stop more attacks.

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast.

What is Black Lotus Labs®?

As the Threat Research and Operations arm of Lumen, we leverage our unmatched network visibility to protect your business and help keep the internet clean. Lumen® Rapid Threat Defense, our threat management solution for business, uses global network data flows and machine learning algorithms to automate protection and neutralize threats. Learn more on the Black Lotus Labs X/Twitter feed and blog archive.

VIEW DATA SHEET

What is Black Lotus Labs®?

See how Black Lotus Labs helps protect your business (1:52)

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to stay on top of emerging threats.

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to stay on top of emerging threats.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Products supported with Rapid Threat Defense

Lumen Defender

Secure your internet connections with proactive blocking and clear visibility with Lumen Defender℠ powered by Black Lotus Labs.

LEARN MORE

Lumen Defender

Secure your internet connections with proactive blocking and clear visibility with Lumen Defender℠ powered by Black Lotus Labs.

Add-On Feature

DDoS Mitigation

Activate powerful protection against single and multi‑vector attacks with minimized downtime.

LEARN MORE Get Offer

DDoS Mitigation

Activate powerful protection against single and multi‑vector attacks with minimized downtime.

Special Offer

DDoS Hyper®

Deploy multi‑layer, self‑service DDoS protection in minutes to help fortify your critical web assets.

LEARN MORE

DDoS Hyper®

Deploy multi‑layer, self‑service DDoS protection in minutes to help fortify your critical web assets.

Secure Access Service Edge (SASE)

Fortify your security at scale and simplify network management with Lumen® SASE with Fortinet®.

LEARN MORE

Secure Access Service Edge (SASE)

Fortify your security at scale and simplify network management with Lumen® SASE with Fortinet®.

Edge Protect

Protect against ransomware, malware, phishing and data exfiltration by enforcing web access policies.

LEARN MORE

Edge Protect

Protect against ransomware, malware, phishing and data exfiltration by enforcing web access policies.

Adaptive Network Security

Streamline security with a cloud‑based platform to simplify threat management for hybrid security environments.

LEARN MORE

Adaptive Network Security

Streamline security with a cloud‑based platform to simplify threat management for hybrid security environments.

Maximize efficiency with automated defense and proactively protect your critical assets against harmful cyberthreats. Learn more about how you can put Rapid Threat Defense to work for your business in our report.

VIEW REPORT

Learning Center

Featured Blog

Taking the Crossroads: The Versa Director Zero‑Day Exploitation

Understand the implications of the latest zero‑day vulnerability in Versa Director servers, how state‑sponsored threat actors are exploiting it and steps you can take to mitigate potential risks to your network.

READ BLOG SEE ALL BLOGS

Featured Blog

Taking the Crossroads: The Versa Director Zero‑Day Exploitation

Aerial view of a busy highway interchange at night with illuminated trails of traffic overlaid with a laptop displaying a computer network

What people are saying

“We have that global internet backbone where we collect 200B netflow sessions per day, which allows us to parse through this data and look for who exactly is being infected.”

– Danny Adamitis, Lumen Black Lotus Labs

“We have that global internet backbone where we collect 200B netflow sessions per day, which allows us to parse through this data and look for who exactly is being infected.”

– Danny Adamitis, Lumen Black Lotus Labs

“Lumen’s research team said the purpose of AVrecon appears to be stealing bandwidth—without impacting end‑users—in order to create a residential proxy service to help launder malicious activity…”

– KrebsonSecurity

“Our data illustrates the winding down of operations leading up to QakBot’s seasonal ‘lull’ in operations, which appears in part to have been accelerated by good work from Lumen’s Black Lotus Labs.”

– Team Cymru