Cybersecurity researchers have identified a sophisticated spear-phishing campaign targeting a law firm using two previously undocumented malware tools: HollowFrame, a Go-based loader framework, and Matryoshka, a Rust-based backdoor. The attack begins with a phishing email containing a link to an encrypted archive with a malicious Windows Shortcut file that initiates a multi-stage infection chain.
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
