Threat Research

Our researchers have observed a new wave of Prometei botnet activity. Prometei refers to both the malware family and the botnet infrastructure used to remotely control compromised Linux and Windows systems for Monero mining and credential theft....

"Unmasking Prometei: A Deep Dive Into Our MXDR Findings" examines the Prometei botnet, active since 2016, which focuses on cryptocurrency mining and credential theft. By early 2023, it had compromised over 10,000 systems, particularly in Brazil, Indonesia, and Turkey....