Tag: matryoshka backdoor

HollowFrame Loader Deploys Matryoshka Backdoor in Targeted Law Firm Attacks

Cyber attackers have deployed a sneaky duo, HollowFrame and Matryoshka, to gain a persistent foothold in targeted law firm attacks, allowing them to execute remote commands, snoop on Active Directory, and transfer files. It all started with a cleverly crafted spear-phishing message containing a malicious link that set off a multi-stage chain of events.