Name of Malware: Prometei

Type of Malware: Crypto miner, Credential Stealer, Worm

Affected Operating Systems: Windows, Linux

Affected Device Types: PCs, laptops, etc.

Impact: medium

What is Prometei?

Prometei steals data from infected systems and also uses the resources of the infected system to mine cryptocurrencies. The malware also attempts to spread to other systems via the network. There are versions for both Windows and Linux.

How did I get infected with Prometei?

Prometei infects systems either by using weak or stolen credentials, or by exploiting various known vulnerabilities.

What do I have to do now?

To remove Prometei, it is recommended to scan the infected system with an antivirus program. As Prometei settles in several places in the operating system, it may be necessary to reinstall the system

Further information on removing this malware can be found under Removing infections from PCs, laptops etc.

Technical specifications

Further information on this malware can be found on the website of our project partner Fraunhofer FKIE.