Prometei Botnet’s Persistent Playbook

By early 2023, the Prometei v3 botnet, an upgraded version of the Prometei botnet malware, had compromised over 10,000 systems mining the Monero cryptocurrency. In its latest iteration, identified in March 2025, Prometei stepped up with new Linux-specific variants.