Excerpt
Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation
Published on Jun 10, 2026 | 11 minute read
Black Lotus Labs® recently identified a significant resurgence of the JDY botnet, a covert reconnaissance network tied to China-nexus threat activity. In this report, we examine how the botnet has expanded its footprint, diversified its device base and enabled rapid vulnerability targeting, giving defenders important insight into how modern reconnaissance supports subsequent exploitation.
Key findings
Black Lotus Labs has identified a resurgence and exp…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Lumen Black Lotus Labs on lumen.com.
More from Lumen Black Lotus Labs1
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
On the same topics
- Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)US Department of Justice · Published 6 Apr 2022
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- Resources - SecurityScorecardSecurityScorecard · Added 25 Oct
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware FamilySilent Push · Published 4 Feb
