Person
Ryan English
- First Reported
- Oct 7, 2026
- Latest Reported
- Oct 7, 2026
Reported Context (2)
- Information security engineer at Lumen Technologies who provided comments about how the malware derives its C2 address from the poem. PoeLLM Malware Targets Exposed AI and LLM Servers to Expand Crypto-Mining Botnet
- Information security engineer at Black Lotus Labs who described the malware and botnet to CyberScoop. PoeLLM Malware Botnet Compromises More Than 3,400 Servers Using a Poem to Hide C2
Malware (3)
Vendors (2)
Products (6)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.