{"id":443,"date":"2023-03-13T09:47:37","date_gmt":"2023-03-13T12:47:37","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=443"},"modified":"2023-03-13T15:12:27","modified_gmt":"2023-03-13T18:12:27","slug":"prometei-botnet-infecta-mais-de-10-000-servidores-exchange","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/","title":{"rendered":"Prometei Botnet infecta mais de 10.000 servidores Exchange"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Uma vers\u00e3o atualizada de um malware botnet chamado Prometei infectou mais de 10.000 sistemas em todo o mundo desde novembro de 2022.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As infec\u00e7\u00f5es s\u00e3o geograficamente indiscriminadas e oportunistas, com a maioria das v\u00edtimas relatadas no Brasil, Indon\u00e9sia e Turquia.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O Prometei, observado pela primeira vez em 2016, \u00e9 um botnet modular que apresenta um grande repert\u00f3rio de componentes e v\u00e1rios m\u00e9todos de prolifera\u00e7\u00e3o, alguns dos quais tamb\u00e9m incluem a explora\u00e7\u00e3o de falhas do ProxyLogon Microsoft Exchange Server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tamb\u00e9m \u00e9 not\u00e1vel por evitar atacar a R\u00fassia, sugerindo que os agentes de amea\u00e7a por tr\u00e1s da opera\u00e7\u00e3o provavelmente est\u00e3o baseados no pa\u00eds.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As motiva\u00e7\u00f5es do botnet multiplataforma s\u00e3o financeiras, principalmente aproveitando seu parque de hosts infectados para minerar criptomoedas e colher credenciais.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;Essa nova variante do Prometei (chamada v3) tem aprimorado suas funcionalidades, investido em ofuscar seu c\u00f3digo e esconder seus rastros, dificultando an\u00e1lise forense, al\u00e9m de aprofundar ainda mais seu acesso \u00e0s m\u00e1quinas v\u00edtimas&#8221;<\/em>, explica Emilio Simoni, CEO da AHT Security, empresa especializada em solu\u00e7\u00f5es de prote\u00e7\u00e3o contra hackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A sequ\u00eancia de ataque ocorre da seguinte forma:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ao obter acesso ao dispositivo da v\u00edtima um comando do PowerShell \u00e9 executado para baixar o malware botnet de um servidor remoto<\/li>\n\n\n\n<li>O m\u00f3dulo principal do Prometei \u00e9 ent\u00e3o usado para baixar os payloads de minera\u00e7\u00e3o de criptomoedas e outros componentes auxiliares no sistema.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"778\" height=\"426\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware1.jpg\" alt=\"\" class=\"wp-image-446\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware1.jpg 778w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware1-300x164.jpg 300w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware1-768x421.jpg 768w\" sizes=\"auto, (max-width: 778px) 100vw, 778px\" \/><figcaption class=\"wp-element-caption\">Imagem do site da talos sobre o processo de infec\u00e7\u00e3o do botnet<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Alguns desses m\u00f3dulos de suporte funcionam como programas de propaga\u00e7\u00e3o projetados para propagar o malware por meio do Remote Desktop Protocol (RDP), Secure Shell (SSH) e Server Message Block (SMB).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O Prometei v3 tamb\u00e9m \u00e9 not\u00e1vel por usar um algoritmo de gera\u00e7\u00e3o de dom\u00ednio (DGA) para construir sua infraestrutura de comando e controle (C2). Ele inclui ainda um mecanismo de autoatualiza\u00e7\u00e3o e um conjunto expandido de comandos para coletar dados confidenciais e comandar o host.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Por \u00faltimo, mas n\u00e3o menos importante, o malware implanta um servidor web Apache que vem com um shell web baseado em PHP, que \u00e9 capaz de executar comandos codificados em Base64 e realizar uploads de arquivos.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">IOC&#8217;s<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">23.148.145.237<br>69.84.240.57<br>103.40.123.34<br>103.184.128.180<br>103.184.128.244<br>194.195.213.62<br>211.232.48.65<br>103.65.236.53<br>177.73.237.55<br>221.120.144.101<br>p1.feefreepool.net<br>p2.feefreepool.net<br>p3.feefreepool.net<br>gb7ni5rgeexdcncj.onion<br>mkhkjxgchtfgu7uhofxzgoawntfzrkdccymveektqgpxrpjb72oq.zero<br>http:\/\/23.148.145.237:180\/update.7z<br>http:\/\/69.84.240.57:180\/AppServ180.zip<br>http:\/\/103.40.123.34\/k.php<br>http:\/\/103.40.123.34\/7z32.dll<br>http:\/\/103.40.123.34\/7z32.exe<br>http:\/\/103.40.123.34\/std2.7z<br>http:\/\/103.40.123.34\/dwn.php?d=rdpcIip.exe<br>http:\/\/103.40.123.34\/dwn.php?d=7z32.exe<br>http:\/\/103.40.123.34\/dwn.php?d=7z32.dll<br>http:\/\/103.126.6.233:180\/AppServ180.zip<br>http:\/\/103.40.123.34\/srch.7z<br>http:\/\/103.40.123.34\/desktop.txt<br>http:\/\/103.40.123.34\/bklocal2.php<br>http:\/\/103.40.123.34\/bklocal4.php<br>http:\/\/103.40.123.34\/update.7z<br>http:\/\/194.195.213.62:180\/srch.7z<br>http:\/\/103.184.128.244\/update.7z<br>http:\/\/211.232.48.65:180\/update.7z<br>http:\/\/p2.feefreepool.net\/cgi-bin\/prometei.cgi<br>http:\/\/mkhkjxgchtfgu7uhofxzgoawntfzrkdccymveektqgpxrpjb72oq.zero\/cgi-bin\/prometei.cgi<br>https:\/\/gb7ni5rgeexdcncj.onion\/cgi-bin\/prometei.cgi<br>http:\/\/mkhkjxgchtfgu7uhofxzgoawntfzrkdccymveektqgpxrpjb72oq.b32.i2p\/cgi-bin\/prometei.cgi<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2e4e64035382eae04c035e2edb6f7080c221064859d95cdc4f458258af0289ae<br>bfe10104a2709d8dfeea3ddc373e3367a2ba2782ee8a0ee4d0f819869ccb0d4f<br>c1f8625ad3b13de77372cb4608210792d3f4b1b0909ae3593558d9d8f4306c99<br>34efa1b8c185d5ba7290909c4446b1414684b09a9871d5c462c4fc609fbd87d2<br>25dc9c2a2d31c42c63de0ed247784e33ea31f140d8035ac2141cb46f25eaefd4<br>ea8cde21792543d7e55dd9a2a894c3cd4fc4fabaeab20ba689b84416c20a6e37<br>85a2d8f020b14cd11e95fd52328048ebe3e86f3f6a7cb76028143b7009a9b294<br>44458197aafcb273b91f90a8cc55078b318e4f8a0384303acd1a5b3c13ff1ee0<br>f4ac4f735b9ff260a275734d86610dccb8558d1a54c6d6a78a94c33b6aaf6e39<br>01bee3bb01f34f8da926c6b83980958166f1b10d00a923deb87361e9f34bcd83<br>82c19c95f70c2a67be8a4914ed6c6b79b84aef3c1d65fefe85f90d89538bbe23<br>6477b1ea0cc53d0c508295dcc53a0d465acc3fa712a56d846ca3bf0e296c83a5<br>9788c1614110fa6e1ab957e4563331a8f8bddd926a0c3f8c7b891afa2203cf68<br>f11adbdad7200b90237dd9bbd5dbbf0b5ad30dd5a931fbef22cb0790e1851d82<br>2d3b705d61448b84b89f7cead3c9b7cb9707a8ffcefa38fa81fdda16058a6dd6<br>dbd60814376047e2be10682110c1a1b3236f937ba522de66566197d939d2e48e<br>0ca3a4c2800f9454cdcbb8398a7ec97b00f90f4234c7c5e48e206a8352d86750<br>ab9314c85b81caa832a49db8d0a86b6b871f749d7d6afcf4042d311cb63bd898<br>608b2c8220a595a9766e2fdc5c91899dda635f97bc505e1a41e523aaddb11652<br>6f39d02f27e3241224bb16e4753091b9d4ae2b4d0108a3fde2e3ebad0e1627bf<br>4482fe91047b1e5c9c6f113893cfaae1b5815d743234807e68809b1235bef00b<br>c63074ace67db45003b4bbf7e99a57540956a98cd182c860cf80f3b7fa083565<br>60585ca50fd149468d48f219988a3fd895add7a9c618e60e466b49f8695f48d5<br>a34a47ca8095389e29716418a0e7e98fda0ab9b8547ff7a8604a0e54df07b1fe<br>35f9417c7be811df5b366963dc3986e6fb2e486afa0a0f64a092492b617c09e9<br>61effa41e84446f6d712abb4707df964b9c82320602772962693caedc45f23b7<br>beca799029efa98646c861accc607cba8ef8ab52749a906524e8dd7981b38df2<br>24654558cc1672532958387c6c0a91064ec58a381bfbbc10ef29447650dfe34f<br>5319ee3372c439fb9d85a8174eea814a6c581d81a4af0fe7a9f686d403753c4d<br>334e828a09bd64abb9a4f70256f4d2f8ffdf3249153f1e2356e861d188d8ba89<br>c512cad695fc027f3d3df46159a1f1b43d7641c37d6ade44870c052e36496bae<br>3e8c0271c55975663ee03e25a047b1a27ef1905327dea3d1f897c5a27b31d8e6<br>cf5f1f2d7672d441f592d177e3f4a1a1f87e2abcef21e626d69f552cd0a2864d<br>39b1042a5b02f3925141733c0f78b64f9fae71a37041c6acc9a9a4e70723a0f1<br>314d2f1cb70c025ab0ba9de8c13914bda674b8f0a23e54454374d14d57fd2786<br>a546c3defb20bb18205b19c5218795fa9c6388d2e2ec3e65707b4e7afaeac0e1<br>af000bc9f397975604ec0ffd36ff414005ea49ca97ec176eadd14072ceccac00<br>54bf36b5bdb844f46fd9849ac311e2efb62e16030c62597630cf38b4e3f8e8fa<br>d8f0712345356b5e68467eec43738fb44cca9df03c4a9b76873f48b5eab01b8c<br>d3c1dc40e7fdd55a037b73f708cdc6761762ebf5161e1fe86cdfc48ac51389dc<br>d1dfa4ab27798cfc9203c644358fe83e20ebf194a28502e1c8f43ad7a181e023<br>655c294a4f4d3d01a9ba3a9563e136109dae7af0772cb3620e42357b59af476d<br>a6fb2a8604ab7c6c9d349d04741800926dc81dbd6f56c43382b54bc7f8cc7ca4<br>ca4577de74c66b89aa47bc91dadc8ece1564816b0b4528cbce7f3ab152396e3c<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Uma vers\u00e3o atualizada de um malware botnet chamado Prometei infectou mais de 10.000 sistemas em todo o mundo desde novembro [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":449,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[94,95,93],"class_list":["post-443","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-botnet","tag-exchange","tag-prometei"],"yoast_head":"<title>Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Uma vers\u00e3o atualizada de um malware botnet chamado Prometei infectou mais de 10.000 sistemas em todo o mundo desde novembro [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-13T12:47:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-13T18:12:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"888\" \/>\n\t<meta property=\"og:image:height\" content=\"535\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Prometei Botnet infecta mais de 10.000 servidores Exchange\",\"datePublished\":\"2023-03-13T12:47:37+00:00\",\"dateModified\":\"2023-03-13T18:12:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/\"},\"wordCount\":1142,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-13-prometi_malware2.jpg\",\"keywords\":[\"botnet\",\"exchange\",\"prometei\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/\",\"name\":\"Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-13-prometi_malware2.jpg\",\"datePublished\":\"2023-03-13T12:47:37+00:00\",\"dateModified\":\"2023-03-13T18:12:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-13-prometi_malware2.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-13-prometi_malware2.jpg\",\"width\":888,\"height\":535},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Prometei Botnet infecta mais de 10.000 servidores Exchange\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/","og_locale":"pt_BR","og_type":"article","og_title":"Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security","og_description":"Uma vers\u00e3o atualizada de um malware botnet chamado Prometei infectou mais de 10.000 sistemas em todo o mundo desde novembro [&hellip;]","og_url":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/","og_site_name":"Tech Security","article_published_time":"2023-03-13T12:47:37+00:00","article_modified_time":"2023-03-13T18:12:27+00:00","og_image":[{"width":888,"height":535,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Prometei Botnet infecta mais de 10.000 servidores Exchange","datePublished":"2023-03-13T12:47:37+00:00","dateModified":"2023-03-13T18:12:27+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/"},"wordCount":1142,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg","keywords":["botnet","exchange","prometei"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/","url":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/","name":"Prometei Botnet infecta mais de 10.000 servidores Exchange - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg","datePublished":"2023-03-13T12:47:37+00:00","dateModified":"2023-03-13T18:12:27+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-13-prometi_malware2.jpg","width":888,"height":535},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/03\/prometei-botnet-infecta-mais-de-10-000-servidores-exchange\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Prometei Botnet infecta mais de 10.000 servidores Exchange"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=443"}],"version-history":[{"count":2,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/443\/revisions"}],"predecessor-version":[{"id":448,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/443\/revisions\/448"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/449"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}