Threat IntelligenceJun 12, 2026
RT @FBICyberDiv: This week, @FBICleveland, in coordination with Google and Lumen's Black Lotus La...
FBI, Google, and Lumen takedown operation targets Russian GRU malware.
Vendor Watch
Run Google?
Get an email when a reviewed story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
The FBI, in coordination with Google's Threat Analysis Group and Lumen's Black Lotus Labs, has successfully conducted a technical takedown operation against malware used by Russia's GRU (Main Intelligence Directorate). The operation targeted the "Snake" malware, also known as "Nokturnus," which has been employed by Russian intelligence for over a decade to exfiltrate sensitive data from government and private networks globally.
Indicators of Compromise
- malware — Snake
- malware — Nokturnus
Entities
Russian GRU (threat_actor)Google (vendor)Lumen (vendor)Black Lotus Labs (product)