Tag: defender exclusions

HollowFrame Loader Evades Defender with Fake Python DLL Tactic

Clever attackers have found a way to slip past Microsoft Defender by using a fake Python DLL, effectively creating a trusted execution lane that evades detection. They set the stage for this trick by first gaining elevated access through a sneaky spear-phishing link.