Cybersecurity researchers have uncovered a new Go-based loader framework, HollowFrame, and a Rust-based malware family, Matryoshka. These are being deployed in spear-phishing attacks targeting law firms. The attack chain begins with a malicious LNK file in an encrypted archive, leading to a multi-stage infection that delivers the Matryoshka backdoor. This highlights the evolving sophistication of malware development and delivery tactics.