Prometei is a crypto-mining botnet that recently appeared in the threat landscape. It exploits the Microsoft Windows SMB protocol for lateral movements. The botnet appears to be active at least since March 2020, it has a modular structure and employes multiple techniques to infect systems and evade detection. The current number of infected hosts is in the low thousands, its operators only generated $1,250 per month on average. Most of the botnet’s operators are in the US, Brazil, Turkey, China, Mexico and Chile.”]
Source: https://securityaffairs.co/wordpress/106257/malware/prometei-botnet.html