Black Lotus Labs

Everything Threat Times has reported about Black Lotus Labs: 2 stories, newest first. Part of our Malware & Ransomware coverage.

Malware & Ransomware

PoeLLM Cryptominer Hits 3,400 Servers Using GitHub Poem for C2 Communication

Threat TimesOct 11, 2026

Lumen researchers report that the PoeLLM malware has infected over 3,400 servers, primarily targeting exposed AI inference tools like LiteLLM and Ollama.

Cyber Attacks

PoeLLM Botnet Hides C2 in GitHub Poem, Infects 3,400 Servers

Threat TimesOct 9, 2026

Black Lotus Labs reports a cryptomining botnet using a GitHub poem to hide command-and-control addresses, compromising over 3,400 servers.