KV-Botnet: Don’t call it a Comeback

Executive Summary

On December 13, 2023, Lumen’s Black Lotus Labs reported our findings on the KV-botnet, a covert data transfer network used by state-sponsored actors based in China to conduct espionage and intelligence activities targeting U.S. critical infrastructure. Around the time of the first publication, we identified a spike in activity that we assess aligns with a significant effort by the operators managing this network to combat takedown efforts underway by the U.S. Government. 

According to a Department of …

black lotus black lotus labs botnet call china covert critical critical infrastructure data data transfer december don espionage executive findings infrastructure intelligence kv-botnet labs lumen network sponsored state targeting transfer