Cryptomining Campaign Leverages MS Exchange Server Flaw Twitter Get Permission A Russian botnet group called Prometei is exploiting critical Microsoft Exchange Server vulnerabilities to mine cryptocurrency from various organizations across the world, a new report by security firm Cybereason finds.
Cybereason notes the Russian campaign is targeting victim organizations to install monero cryptominer on corporate endpoints, adding that the group appears to be financially-motivated. The threat actor appears to be Russian speaking and is purposely avoiding infections in former Soviet bloc countries, Cybereason notes. The main objective of Prometei is to install the Monero crypto miner on corporate endpoints. To spread across networks, the threat actor is using known Microsoft Exchange vulnerabilities, in addition to known exploits EternalBlue and BlueKeep.
Cybersecurity Tensions Rise During President Biden s First 100 Days forbes.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from forbes.com Daily Mail and Mail on Sunday newspapers.
Cybereason Discovers Global Botnet Campaign Leveraging Microsoft Exchange Vulnerabilities
Share Article
The Prometei Botnet impacts many industries globally; Victims are random, making the cryptomining botnet more dangerous and widespread
“The Prometei Botnet poses a big risk for companies because when the attackers take control of infected machines, they are capable of mining bitcoin by stealing processing power and also exfiltrating sensitive information,” said Assaf Dahan, senior director and head of threat research, Cybereason. BOSTON (PRWEB) April 22, 2021
Cybereason, the leader in future-ready attack protection, today announced the discovery of a widespread, global campaign seeking to propagate the stealthy Prometei Botnet, by targeting organizations with a multi-stage attack to steal processing power to mine bitcoin. The threat actors, who appear to be Russian speakers, are taking advantage of previous