LIVE · cybersecurity feed
Live wire

loader news

2 stories
malwarehigh

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

Cybersecurity researchers have reported the discovery of a novel loader framework, dubbed HollowFrame, which has been observed deploying a sophisticated Rust-based backdoor known as Matryoshka. The initial vector for these attacks is a spear-phishing campaign specifically targeting a law firm, indicating a focused and potentially high-value target. The attack chain is initiated when a…

malwarehigh

Lost in relocation: analysis of a new loader distributing CASTLESTEALER

A newly identified malware loader, dubbed OXLOADER, is being distributed through malicious Google advertisements, aiming to deliver the CASTLESTEALER information-stealing malware. Security researchers have observed OXLOADER employing a range of sophisticated obfuscation techniques to evade detection by static analysis tools and sandbox environments.