Prometei Botnet Targets Windows Servers for Remote Access and Malware Deployment

The Prometei botnet, linked to Russian cybercriminals, is actively targeting Windows Server systems to gain remote access and deploy malware. This modular malware is capable of cryptocurrency mining, credential theft, and lateral movement within networks, exploiting weak or default credentials via Remote Desktop Protocol (RDP). Organizations using Windows Server are at risk of long-term compromise due to this sophisticated attack.