New HollowFrame loader and Matryoshka malware family discovered

The attack chain begins with a spear-phishing email containing a link to an encrypted archive.