MintsLoader Mayhem: Malware Campaigns Targeting Energy and Legal Sectors with Sneaky Tactics
MintsLoader is the latest malware loader causing havoc, distributing StealC and BOINC under the guise of fake CAPTCHA pages. Cybersecurity firm eSentire detected this campaign targeting the energy and legal sectors in the U.S. and Europe. Keep your spam filters on high alert, as MintsLoader is lurking in your inbox.
Hot Take:
**_Ah, MintsLoader, the malware that delivers secondary payloads like a shady delivery service, offering up both info-stealers and legitimate software, all wrapped up in a PowerShell bow. It’s like ordering a pizza and finding out your toppings are a mix of anchovies and a tax audit. Truly, the gift that keeps on giving!_**
Key Points:
– MintsLoader, a PowerShell-based malware, is delivered via spam emails linked to ClickFix pages or JScript files.
– Target industries include electricity, oil, gas, and legal services in the US and Europe.
– Malware leverages fake CAPTCHA prompts to trick users into executing PowerShell scripts.
– MintsLoader deploys StealC, a MaaS info stealer, avoiding infection in certain countries.
– The campaign exemplifies the proliferation of malware loaders like JinxLoader and Astolfo Loader.