Embusa /analyst
Product

Blog

Threat research reports and product updates from Embusa /analyst.

ProductJul 15, 2026

Embusa /analyst takes apart a live backdoor in six minutes and forty-five seconds

We gave the agent one unknown DLL and nothing else. It came back with a full teardown of a recent LotusLite backdoor: no internet access, no external threat intelligence, no human in the loop.

Embusa team · 7 min read
Threat ResearchJul 16, 2026

LotusLite malware: complete technical analysis of a Windows implant

A function-by-function teardown of LotusLite's installation, persistence, string obfuscation, HTTPS command channel, binary protocol, remote shell, file-transfer commands, IOCs, and detection opportunities.

Embusa Research · 16 min read
Jul 16, 2026Threat ResearchLotusLite malware: complete technical analysis of a Windows implantEmbusa Research16mJul 15, 2026ProductEmbusa /analyst takes apart a live backdoor in six minutes and forty-five secondsEmbusa team7m

Personalized walkthrough

Request a demo

Tell us about your team and what you’d like to explore with Embusa /analyst.

*We'll only email you about your request.

Sector
How did you hear about us?

Early access

Join the next alpha batch

Tell us a little about yourself and we’ll keep you updated as access expands.

*We'll only email you about your request.

What is your current role?
How did you hear about us?