DevThe Hacker Newsabout 3 hours ago
HollowFrame Loader Deploys Matryoshka Backdoor
1 min read
A spear-phishing attack on a law firm used the HollowFrame Go loader and Rust-based Matryoshka backdoor. The chain exploited DLL side-loading, weakened Microsoft Defender, and used GitHub for command-and-control. Two endpoints were compromised via a fake "Case Documents" LNK file.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
