Security News HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm TheHackerNews Daniel Bender 31 Jul 2026 Share HollowFrame and Matryoshka use DLL side-loading and GitHub C2 to gain a persistent foothold on two law firm endpoints.