Prometei (Windows)
- First seen
- 2016-01-01 00:00:00
- Malware type
- botnet, cryptominer
- Family
- Malware family
- Profile updated
- 2026-07-07 14:28:45
Context
According to Lior Rochberger, Cybereason, prometei is a modular and multi-stage cryptocurrency botnet. It was discovered in July 2020, Cybereason Nocturnus team found evidence that this Prometei has been evolved since 2016. There are Linux and Windows versions of this malware.
Reports & references
- Trend Micro — Proxylogon A Coinminer A Ransomware And A Botnet Join The Part (report)
- cybereason.com — Prometei Botnet Exploiting Microsoft Exchange Vulnerabilities (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Prometei (report)
- twitter.com — 1494311182550904840 (report)
- twitter.com — 1494016518694309896 (report)
- Trend Micro — Unmasking Prometei A Deep Dive Into Our Mxdr Findings (report)
- Cisco Talos — Prometei Botnet Improves (report)