MintsLoader Malware Disrupts Energy and Legal Sectors, Delivers StealC and BOINC; Lazarus Group Targets Cryptocurrency

A new cybersecurity threat has emerged as the MintsLoader malware loader is reported to be causing disruptions across critical industries, including energy and legal sectors. This malware is delivered through spam links leading to a JScript file, which then activates MintsLoader. The MintsLoader is known to deploy StealC malware and BOINC in targeted cyber attacks. Additionally, the Lazarus Group has been identified as deploying Electron-based malware to specifically target cryptocurrency enthusiasts. In a related advisory, a flaw in the 7-Zip open-source file archiver could allow attackers to create archives that bypass Windows security warnings, potentially tricking users into executing malware.