Lumen Defender

Reported Context (2)

blocked all traffic to and from the PoeLLM C2 servers and will continue to monitor for new traffic. Lumen Defender customers have been protected from PoeLLM servers since we discovered this malware. We encourage PoeLLM Malware Targets Exposed AI Services with Poem-Based Command-and-Control
Intelligence generated by Black Lotus Labs powers multiple security outcomes across the Lumen Defender â security portfolio, including threat detection, DDoS protection and infrastructure defense. How Threat Intelligence Turns Raw Indicators Into Actionable Security Insights

CVE (2)

Malware (4)

People (2)

Threat Actors (1)

MITRE ATT&CK (5)

Vendors (1)

Products (8)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.