Prometei administrators have some of the technical groundwork in place should they want to embrace more « destructive payloads »

https://www.cybereason.com/blog/prometei-botnet-exploiting-microsoft-exchange-vulnerabilities