FlagThis

A widespread campaign is leveraging the MintsLoader malware loader to distribute secondary payloads, including the StealC information stealer and a legitimate open-source network computing platform called BOINC. MintsLoader, a PowerShell-based loader, is delivered via spam emails with malicious attachments. This campaign targets a wide range of users with the intent to steal sensitive information using Stealc, and also leveraging BOINC for other malicious purposes such as crypto mining and other resource abuse. The multi-pronged approach makes this campaign more versatile and dangerous.

ImgSrc: ciso2ciso.com

References:

• CISO2CISO.COM & CYBER SECURITY GROUP - MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks – Source:thehackernews.com - 1d
• The Hacker News - MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks - 1d
• SCM feed for Threat Management - Secondary payloads delivered via MintsLoader attacks - 1d
• ciso2ciso.com - MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks - 22h

Classification:

• HashTags: Malware InfoStealer MintsLoader
• Target: Users
• Feature: Malware Distribution
• Type: Malware
• Severity: Major