The Sepulcher Serpent

Executive Summary

Lumen Technologies’ Black Lotus Labs identified a destructive event, as over 600,000 small office/home office (SOHO) routers were taken offline belonging to a single internet service provider (ISP). The incident took place over a 72-hour period between October 25-27, rendered the infected devices permanently inoperable, and required a hardware-based replacement. Public scan data confirmed the sudden and precipitous removal of 49% of all modems from the impacted ISP’s autonomous system number (ASN) during this time period.

Our analysis …

black lotus black lotus labs data devices event executive hardware home home office incident internet internet service isp labs lotus lumen lumen technologies october office offline period public routers scan serpent service service provider single soho taken technologies