HollowFrame Loader Uses Fake Python DLL to Evade Defender

M Mahesh Kumar Sahoo Published Aug 3, 2026 · 16:56 · 1 min read Infosecurity Magazine

New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions

Mahesh Kumar Sahoo — Mahesh covers ransomware gangs, data leak sites, and dark web marketplaces, mapping how stolen data surfaces and gets sold. Follows ShinyHunters-style groups across leak forums.

Comments (0)

Be the first to comment.

Join the discussion

Malware · 1d ago

State-Sponsored Hacking Group Sandworm Targets Job Seekers with Malicious VPN Software

Cyber espionage actors are leveraging the trust and eagerness of job seekers in a highly targeted malware campaign.…

Malware · 1d ago

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT…

Malware · 1d ago

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign…

HollowFrame Loader Uses Fake Python DLL to Evade Defender

Comments (0)

Join the discussion

Related

State-Sponsored Hacking Group Sandworm Targets Job Seekers with Malicious VPN Software

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands