HollowFrame Loader Evades Defender with Fake Python DLL

Blackpoint Cyber's Adversary Pursuit Group has identified a sophisticated attack framework that manipulates Microsoft Defender settings before deploying malware disguised as Python components.

Read the original article:

HollowFrame Loader Evades Defender with Fake Python DLL