Participating company report
Black Lotus Labs research on the Raptor Train botnet
Lumen Technologies Black Lotus Labs, September 18, 2024. More than 200,000 compromised devices, botnet architecture.
- Source type
- Participating company report
- Published
- September 18, 2024
- Research grade
- T1
- Used in entries
- 3
Bibliographic record
- Publisher
- Lumen Technologies Black Lotus Labs
- Published
- September 18, 2024
- Source type
- Participating company report
- Research grade
- Source grade T1
- Language
- English
- Official record
- Not an official publication
- Address
- No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.
- What it supports
- More than 200,000 compromised devices, botnet architecture
- Dataset id
- src_lumen_raptor_train_2024
Research notes
- URL not re-verified in this pass.
How this source is used
Cited 3 times across 3 record types.
The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.
Sources were reviewed to a research cutoff of August 20, 2026. Addresses recorded after that date are not reflected here.
Cited by
Takedown records
1 citation
Cited on the takedown record itself.
-
Raptor Train botnet disruptionSupporting source
State sponsored, September 2024
Organization roles
1 citation
Cited for an organization's recorded role in a takedown.
-
Lumen Technologies Black Lotus LabsTechnical evidence
Technical partner, Raptor Train botnet disruption
Infrastructure
1 citation
Cited for infrastructure recorded as acted on.
-
more than 200,000 malware installationsTechnical evidence
Malware installations remediated, Raptor Train botnet disruption