MATCHBOIL now hides C2 servers behind Cloudflare, delivers backdoors via DLLs & evades analysis. #Security #Malware #MATCHBOIL #UAC0099 #ThreatIntel #Cloudflare https://thedailytechfeed.com/matchboil-malware-evolves-cloudflare-hidden-servers-dll-payloads-go-stealth/

ESET links MATCHBOIL infections in Ukrainian transport, manufacturing and energy companies to targeted email links.

The cases span several sectors, but don’t establish the ca…

https://en.hacks.gr/i-eset-entopise-to-matchboil-se-epitheseis-kata-etaireion-stin-oykrania/

#MATCHBOIL #UAC0099 #Ukraine

UAC-0099's ASHVEIN RAT hides its C2 tasking in invisible HTML elements - aimed at Ukrainian gov staff. https://intel.threadlinqs.com/threat/TL-2026-3083 #ThreatIntel #ASHVEIN #MATCHBOIL #DRAGSTARE

UAC-0099's MATCHBOIL now hides behind .NET Reactor and sandbox checks to hit Ukrainian energy and transport. https://intel.threadlinqs.com/threat/TL-2026-3058 #ThreatIntel #MATCHBOIL #MATCHWOK #DRAGSTARE

#ESETresearch has analyzed the evolution of #MATCHBOIL, a C# downloader used by the 🇷🇺 Russia-aligned APT group UAC-0099 to download, install, and persist another payload.
@reib3n1

https://
welivesecurity.com/en/eset-…

— from @ESETresearch (https://x.com/ESETresearch/status/2108227114314928419)

#ESETresearch has analyzed the evolution of #MATCHBOIL, a C# downloader used by the 🇷🇺 Russia-aligned APT group UAC-0099 to download, install, and persist another payload. @reib3n1 www.welivesecurity.com/en/eset-rese... 1/7