Participating company report # Black Lotus Labs research on the Raptor Train botnet Lumen Technologies Black Lotus Labs, September 18, 2024. More than 200,000 compromised devices, botnet architecture. **Source type:** Participating company report **Published:** September 18, 2024 **Research grade:** T1 **Used in entries:** 3 ## Bibliographic record **Publisher:** Lumen Technologies Black Lotus Labs **Published:** September 18, 2024 **Source type:** Participating company report **Research grade:** Source grade T1 **Language:** English **Official record:** Not an official publication **Address:** No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher. **What it supports:** More than 200,000 compromised devices, botnet architecture **Dataset id:** src\_lumen\_raptor\_train\_2024 ## Research notes - URL not re-verified in this pass. How this source is used Cited 3 times across 3 record types. The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards. Sources were reviewed to a research cutoff of August 20, 2026. Addresses recorded after that date are not reflected here. ## Cited by ### Takedown records 1 citation Cited on the takedown record itself. - [Raptor Train botnet disruption](https://takedownindex.org/takedowns/raptor-train-botnet-disruption) State sponsored, September 2024 Supporting source ### Organization roles 1 citation Cited for an organization's recorded role in a takedown. - [Lumen Technologies Black Lotus Labs](https://takedownindex.org/takedowns/raptor-train-botnet-disruption) Technical partner, Raptor Train botnet disruption Technical evidence ### Infrastructure 1 citation Cited for infrastructure recorded as acted on. - [more than 200,000 malware installations](https://takedownindex.org/takedowns/raptor-train-botnet-disruption) Malware installations remediated, Raptor Train botnet disruption Technical evidence [All sources](https://takedownindex.org/sources)