Executive summary  The Black Lotus Labs team at Lumen Technologies is tracking a small office/home office (SOHO) router botnet that forms a covert data transfer network for advanced threat actors. We are calling this the KV-botnet, based upon artifacts in … Continue reading Routers roasting on an open firewall: the KV-botnet investigation