#Using powermta on linux vps cracked
#Using powermta on linux vps download

Think of Prometheus like a freight transport infrastructure except instead of carrying food or petrochemicals, it carries a range of cyber offensive capabilities and malware to its targets. Prometheus can be considered a full-bodied service/platform that allows threat groups to purvey their malware or phishing operations with ease. The BlackBerry Research & Intelligence Team has also discovered an interesting correlation between Prometheus and the use of a leaked Cobalt Strike SSL key pair, which we will elaborate in more detail later. The TDS helps to deliver malware binaries to targets via a complex web of phishing, maldocs and HTTP redirection. As its name suggests, a TDS is a system designed to (re)direct users from one web location to another, based on the configuration set by its operator. Prometheus at its core is a Traffic Direction System (TDS) used to facilitate Malware-as-a-Service (MaaS) operations and phishing redirection on a large scale. entities in the public and private sector, as well as individuals in Belgium.

They shone light on two large email campaigns targeting U.S. In August of 2021, Group-IB published research on Prometheus TDS.

Prometheus: The God of Fire (and TDSes?!) In our revamped plot line, there is hope at the bottom of PandoraвЂ™s box in the form of passionate researchers working diligently to identify and thwart these cyber-thieves. The torch is now a Beacon (of the cracked/leaked Cobalt Strike variety). In our gritty reboot of this classic tale, instead of a rebel bringing the light of knowledge to humanity, the main character is the вЂњpuppetmasterвЂќ of a monstrous cephalopod that has its tentacles wending its way around a huge territory. What would this tale look like if it were updated, with the god of fire reimagined as a cybercriminal? Prometheus, a supreme trickster, stole fire for humankind by lighting a torch from the sun. He has published information and tooling that makes it possible to decrypt this Beacon traffic.

#Using powermta on linux vps cracked

Malware researcher for NVISO Labs Didier Stevens also recently found six SSL private keys bundled with cracked or leaked copies of Cobalt Strike, one of which has an extensive overlap with Prometheus-related activity.

With the data gathered from the BlackBerry Research & Intelligence TeamвЂ™s Cobalt Strike Team Server scanning solution, we were able to cluster a variety of different malware families theyвЂ™ve used, based on Beacon configuration data.

#Using powermta on linux vps download

This threat actor appears to lean heavily on Cobalt Strike for part of its infrastructure (for more information about Cobalt Strike please download our recent book on the subject).

The Crimeware-as-a-Service (CaaS) offering was posted by a cyber threat actor called вЂњMa1nвЂќ on various Russian hack forums, to a primarily Russian customer base.

The subscription-based malware service Prometheus TDS was first discovered in August of 2021 by Group-IB, as part of an email campaign targeting U.S.