Black Lotus Labs

FBI Seizes QScan and QTRouter Platforms Run by China State Hackers

• Cybercriminals

FBI Seizes QScan and QTRouter Platforms Run by China State Hackers

Do Son August 27, 2026 0

The DOJ and FBI seized QScan and QTRouter, platforms run by China state-sponsored hackers to hide attacks on U.S. critical infrastructure.

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

• Malware

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

Do Son June 17, 2026 0

The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.

New Showboat Linux Malware Targets Global Telecommunications

• Malware

New Showboat Linux Malware Targets Global Telecommunications

Do Son May 28, 2026 0

Discover the new Showboat Linux malware framework uncovered by Black Lotus Labs. Learn how PRC threat actors target telecommunications networks.

The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network

• Cybercriminals

The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network

Do Son April 13, 2026 0

Russian-linked Forest Blizzard's FrostArmada campaign hijacked 18,000+ routers to steal OAuth tokens via DNS redirection. Learn how they stayed invisible.

Silence of the Hops: The KadNap Botnet Conscripts 14,000 Routers

• Malware

Silence of the Hops: The KadNap Botnet Conscripts 14,000 Routers

Do Son March 15, 2026 0

Black Lotus Labs uncovers KadNap, a stealthy P2P botnet infecting over 14,000 Asus routers to fuel the Doppelgänger dark web proxy network.

SystemBC Botnet Evolves Into High-Volume VPS Proxy Network, Powering Criminal Ecosystem

• Malware

SystemBC Botnet Evolves Into High-Volume VPS Proxy Network, Powering Criminal Ecosystem

Do Son September 23, 2025 0

A new report from Black Lotus Labs reveals SystemBC, a malware-powered proxy network. The botnet compromises VPS systems and fuels global ransomware attacks.