Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware
ID: cb93e900-63d4-58c4-ab2b-5867e8eb1c86
STIX ID: report--cb93e900-63d4-58c4-ab2b-5867e8eb1c86
Feed Name: Infosecurity Magazine (News)
Threat Score
ESET research shows Russia-aligned UAC-0099 has iteratively upgraded its MATCHBOIL C# downloader between April 2024 and April 2026—adding Eziriz.NET Reactor obfuscation, sandbox checks, timered execution, and changing persistence mechanisms—with victims in Ukraine (transportation, manufacturing, energy) observed as recently as June 2026, indicating an actively developed APT capability.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.