Showboat Malware: Emerging Threats Targeting Telecom Providers

Published on May 21, 2026 | 11 minute read

Black Lotus Labs®, the threat research team at Lumen, has uncovered a previously unreported Linux malware family called Showboat, used in a campaign targeting telecommunications organizations across multiple regions. In this post, we break down how the malware works, what our telemetry reveals about the infrastructure behind it, and why these findings matter for defenders tracking persistent threats against critical networks.

Key findings

Black Lotus Labs identified a new Linux malware fami…