Back to Raptor Train botnet disruption
Organizations and roles
Last reviewed August 21, 2026
The public record puts 3 organizations on this action. Operational lead: FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.
Why this page names organizations only
Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.
Organizations and roles
| Emblem | Organization | Role | What the record says |
|---|---|---|---|
| Federal Bureau of Investigation United States , United States | Operational lead | Seized control of the botnet infrastructure and disabled the malware. | |
| United States Attorney's Office for the Western District of Pennsylvania United States , United States | Prosecuting | Obtained the court authorization. | |
| Lumen Technologies Black Lotus Labs United States , United States | Technical partner | Published the technical research identifying the botnet and supported the operation. |
Accountability
Legal authority
Court-authorized seizure and Rule 41 process, Western District of Pennsylvania
Oversight
The record assigns prosecuting or judicial roles to USAO-WDPA.
This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.
Last reviewed August 21, 2026