Tag: boinc

4 Attack Reports | 0 Vulnerabilities

Attack reports

MintsLoader Malware Analysis: Multi-Stage Loader Used in Cyber Attacks

MintsLoader, a malicious loader first observed in 2024, is employed in phishing and drive-by download campaigns to deploy payloads like GhostWeaver, StealC, and modified BOINC clients. It uses obfuscated JavaScript and PowerShell scripts in a multi-stage infection chain, featuring sandbox evasion t…

drive-by download

multi-stage loader

Published: April 29, 2025

Downloadable IOCs: 0

Don't Ghost the SocGholish: GhostWeaver Backdoor

The article details a sophisticated malware infection chain involving SocGholish, MintsLoader, and the GhostWeaver backdoor. The attack begins with a fake browser update, progressing through multiple stages to deploy a PowerShell backdoor and various plugins. These components work together to steal…

credential theft

juniper stealer

Published: February 17, 2025

Downloadable IOCs: 14

MintsLoader: StealC and BOINC Delivery

The eSentire Threat Response Unit identified a campaign involving MintsLoader, a PowerShell-based malware loader, delivering payloads like Stealc and BOINC client. MintsLoader uses a Domain Generation Algorithm and anti-VM techniques to evade detection. The infection process begins with a spam emai…

information stealer

Published: January 20, 2025

Downloadable IOCs: 68

Fake Browser Updates Lead to BOINC Volunteer Computing Software

This report details a recent malware campaign involving the infamous SocGholish/FakeUpdates malware, which tricks users into downloading fake browser updates. However, instead of installing common remote access tools (RATs) as the final payload, some infections resulted in the installation of the l…

Published: July 22, 2024

Downloadable IOCs: 17

Click here to see more Attack Reports