A botnet is taking advantage of Microsoft Exchange server vulnerabilities
The Microsoft Exchange server drama continues. While patches are available and efforts have been taken to mitigate and fix vulnerabilities in Microsoft Exchange servers, a new botnet is on the hunt for unpatched servers. Prometei is a cryptocurrency botnet that’s being used to target organizations around the world. The botnet scans the web for organizations that haven’t applied patches to fix vulnerabilities to work itself into networks.
Cybersecurity researchers at Cybereason detail the malware attack (via ZDNet). One of the key findings of Cybereason is that Prometei exploits the vulnerabilities associated with the HAFNIUM attacks. The botnet uses these vulnerabilities to work itself into networks, which allows it to harvest information and mine for the Monero cryptocurrency.
Once Prometei works itself way into a network, it can use several techniques to move around, including harvesting login credentials, exploiting RDP vulnerabilities, and using older exploits. These techniques can be used to infect several machines.
The vast majority of organizations have installed patches or mitigated vulnerabilities in Exchange servers associated with the HAFNIUM attacks, but Prometei can find unpatched and vulnerable servers.
Prometei has been utilized to attack victims in several industries in North America, South America, Europe, and East Asia.
Microsoft and other organizations have taken several steps to fix the vulnerabilities used in the attacks on Exchange servers. As previously reported, hackers are racing to take advantage of unpatched servers. It seems that this will continue to be an issue until all servers are patched or fixed.
Use GroupMe? You’re finally going to get this long-overdue feature
Beta versions of GroupMe on iOS, Android, and Windows 10 are finally gaining a past-due feature: the ability to delete messages. The feature is now live for Windows Insiders and those enrolled in the beta programs. Such a feature would be necessary if GroupMe is to become a more extensive public social network.
Call of Duty: Warzone gets a new look in Season 3
The third season of Call of Duty: Black Ops Cold War is here, and with it comes the biggest change to Call of Duty: Warzone yet. A new map, new locations, and more are here for players to experience.
