Participating company report

# Derailing the Raptor Train

Lumen Technologies Black Lotus Labs, September 18, 2024. More than 200,000 compromised devices, botnet architecture.

**Source type:** Participating company report

**Published:** September 18, 2024

**Research grade:** T1

**Used in entries:** 3

## Bibliographic record

**Publisher:** Lumen Technologies Black Lotus Labs

**Published:** September 18, 2024

**Source type:** Participating company report

**Research grade:** Source grade T1

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.lumen.com/blog/en-us/derailing-raptor-train](https://www.lumen.com/blog/en-us/derailing-raptor-train)

**What it supports:** More than 200,000 compromised devices, botnet architecture

**Dataset id:** src\_lumen\_raptor\_train\_2024

How this source is used

Cited 3 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Raptor Train botnet disruption](https://takedownindex.org/takedowns/raptor-train-botnet-disruption)

State sponsored, Date not established

Supporting source

### Organization roles

1 citation

Cited for an organization's recorded role in a takedown.

-
[Lumen Technologies Black Lotus Labs](https://takedownindex.org/takedowns/raptor-train-botnet-disruption)

Technical partner, Raptor Train botnet disruption

Technical evidence

### Infrastructure

1 citation

Cited for infrastructure recorded as acted on.

-
[more than 200,000 malware installations](https://takedownindex.org/takedowns/raptor-train-botnet-disruption)

Malware installations remediated, Raptor Train botnet disruption

Technical evidence

[All sources](https://takedownindex.org/sources)