Executive Summary  The Black Lotus Labs team at Lumen Technologies is tracking a small office/home office (SOHO) router botnet that forms a covert data transfer network for advanced threat actors. We are calling this the KV-botnet, based upon artifacts in … Continue reading Routers Roasting on an Open Firewall: the KV-botnet Investigation