BLACK LOTUS LABS

See more threats.
Stop more attacks.

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast. 

EXPLORE SOLUTIONS CONTACT US

BLACK LOTUS LABS

See more threats.
Stop more attacks.

Our cybersecurity experts and advanced threat technology identify and eliminate threats fast. 

What is Black Lotus Labs®?

As the Threat Research and Operations arm of Lumen, we leverage our unmatched network visibility to protect your business and help keep the internet clean. Lumen® Rapid Threat Defense, our threat management solution for business, uses global network data flows and machine learning algorithms to automate protection and neutralize threats. Learn more on the Black Lotus Labs X/Twitter feed and blog archive.

VIEW DATA SHEET

What is Black Lotus Labs®?

As the Threat Research and Operations arm of Lumen, we leverage our unmatched network visibility to protect your business and help keep the internet clean. Lumen® Rapid Threat Defense, our threat management solution for business, uses global network data flows and machine learning algorithms to automate protection and neutralize threats. Learn more on the Black Lotus Labs X/Twitter feed and blog archive.

Black Lotus Labs in black text with black lotus flower logo above the word Labs
Black Lotus Labs in black text with black lotus flower logo above the word Labs PlayButton

See how Black Lotus Labs helps protect your business (1:52)

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to stay on top of emerging threats.

Crimeware analysis and disruption

Daily monitoring of ~46,000 C2s and ~200B+ NetFlow sessions to stay on top of emerging threats.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Advanced actor tracking

High network visibility and owned infrastructure allows for unprecedented tracking and proactive defense.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Automated threat repulsion

Proactive defense through automated threat blocking helps eliminate threats before they cause harm.

Products supported with Rapid Threat Defense 

Lumen Defender

Secure your internet connections with proactive blocking and clear visibility with Lumen Defender℠ powered by Black Lotus Labs.

LEARN MORE

Lumen Defender

Secure your internet connections with proactive blocking and clear visibility with Lumen Defender℠ powered by Black Lotus Labs.

Add-On Feature

DDoS Mitigation

Activate powerful protection against single and multi‑vector attacks with minimized downtime.

LEARN MORE Get Offer

DDoS Mitigation

Activate powerful protection against single and multi‑vector attacks with minimized downtime.

Special Offer

DDoS Hyper®

Deploy multi‑layer, self‑service DDoS protection in minutes to help fortify your critical web assets.

LEARN MORE

DDoS Hyper®

Deploy multi‑layer, self‑service DDoS protection in minutes to help fortify your critical web assets.

Secure Access Service Edge (SASE)

Fortify your security at scale and simplify network management with Lumen® SASE with Fortinet®.

LEARN MORE

Secure Access Service Edge (SASE)

Fortify your security at scale and simplify network management with Lumen® SASE with Fortinet®.

Edge Protect

Protect against ransomware, malware, phishing and data exfiltration by enforcing web access policies.

LEARN MORE

Edge Protect

Protect against ransomware, malware, phishing and data exfiltration by enforcing web access policies.

Adaptive Network Security

Streamline security with a cloud‑based platform to simplify threat management for hybrid security environments.

LEARN MORE

Adaptive Network Security

Streamline security with a cloud‑based platform to simplify threat management for hybrid security environments.

Maximize efficiency with automated defense and proactively protect your critical assets against harmful cyberthreats. Learn more about how you can put Rapid Threat Defense to work for your business in our report.

VIEW REPORT

Maximize efficiency with automated defense and proactively protect your critical assets against harmful cyberthreats. Learn more about how you can put Rapid Threat Defense to work for your business in our report.

Learning Center

Featured Blog 

Taking the Crossroads: The Versa Director Zero‑Day Exploitation

Understand the implications of the latest zero‑day vulnerability in Versa Director servers, how state‑sponsored threat actors are exploiting it and steps you can take to mitigate potential risks to your network.

READ BLOG SEE ALL BLOGS

Featured Blog 

Taking the Crossroads: The Versa Director Zero‑Day Exploitation

Understand the implications of the latest zero‑day vulnerability in Versa Director servers, how state‑sponsored threat actors are exploiting it and steps you can take to mitigate potential risks to your network.

Aerial view of a busy highway interchange at night with illuminated trails of traffic overlaid with a laptop displaying a computer network

What people are saying

Black Lotus Labs black text logo.

“We have that global internet backbone where we collect 200B netflow sessions per day, which allows us to parse through this data and look for who exactly is being infected.”

– Danny Adamitis, Lumen Black Lotus Labs

“We have that global internet backbone where we collect 200B netflow sessions per day, which allows us to parse through this data and look for who exactly is being infected.”

– Danny Adamitis, Lumen Black Lotus Labs

KrebsonSecurity grey and white text logo.

“Lumen’s research team said the purpose of AVrecon appears to be stealing bandwidth—without impacting end‑users—in order to create a residential proxy service to help launder malicious activity…”

– KrebsonSecurity

“Lumen’s research team said the purpose of AVrecon appears to be stealing bandwidth—without impacting end‑users—in order to create a residential proxy service to help launder malicious activity…”

– KrebsonSecurity

Team Cymru black and red text logo.

“Our data illustrates the winding down of operations leading up to QakBot’s seasonal ‘lull’ in operations, which appears in part to have been accelerated by good work from Lumen’s Black Lotus Labs.”

– Team Cymru

“Our data illustrates the winding down of operations leading up to QakBot’s seasonal ‘lull’ in operations, which appears in part to have been accelerated by good work from Lumen’s Black Lotus Labs.”

– Team Cymru

Resources

Two people standing at a computer together pointing at the monitor.

REPORT

Rapid Threat Defense helps proactively protect your critical assets and more

Read Report

REPORT

Rapid Threat Defense helps proactively protect your critical assets and more

Questions? Let’s talk.

Contact our team to get the assistance and answers you’re looking for.

Questions? Let’s talk.

Contact our team to get the assistance and answers you’re looking for.

Start chat

Salesperson

Request a
sales callback

Request a
sales callback

Request a
sales callback

Phone ringing

Call Sales
800‑871‑9244

Call Sales
800‑871‑9244

Call Sales
800‑871‑9244

Contact an expert 

Please complete the form below and one of our specialists will contact you within one business day.