HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing… | HappeningNow.news
Breaking

Cybersecurity · 45 views

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

HollowFrame and Matryoshka use DLL side-loading and GitHub C2 to gain a persistent foothold on two law firm endpoints.

Source Summary Published July 31, 2026 Brief Under 1 min brief
Story intelligence
Coverage Single outlet Single-outlet story
Views 45 Community interest
Brief read Under 1 min brief 47 words

Summary

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK).

Read original at The Hacker News

More from Cybersecurity

Continue reading recent Cybersecurity coverage

Support HappeningNow

Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.

Support HappeningNow

Report an issue with this page