Based on the Nim programming language, the new malware called NimzaLoader is one of the few in the threat landscape.

The cybercriminal group TA800, already known for distributing the BazarLoader malware, has distributed a new malware, NimzaLoader, almost undetectable. Which makes it more pernicious.

A new malicious campaign targeting the email distribution of the malware now known as NimzaLoader. By using the Nim language, NimzaLoader ensures a certain freedom of maneuver. It was first observed on February 3 by Proofpoint researchers NimzaLoader.

The peculiarity is that it is written in a compiled and statically typed programming language, Nim, created by software engineer Andreas Rumpf, based on more advanced languages, such as Python. It spreads via email, using the infrastructure used to distribute Trickbot, one of the most powerful malware in the world.