CERT-AGID warns of MintsLoader malware distributed via fake PEC invoices

CERT-AGID has identified a new fraudulent campaign involving certified email (PEC) that spreads the MintsLoader malware. The scam targets users by sending messages that claim there is an unpaid invoice attached.

To appear legitimate, the attackers use certified email addresses, which often creates a false sense of security for the recipient. The messages typically include a ZIP attachment containing details about the alleged unpaid amount or accounting irregularities. Once the attachment is opened, the MintsLoader malware is executed.

MintsLoader functions as an unloader, meaning its primary purpose is to act as a gateway for other malicious software. While it may not cause immediate damage, it is designed to download and install additional components such as trojans or infostealers to steal sensitive information from the infected computer.