
ESET Researchers Trace MATCHBOIL Malware Used by Russia-Aligned Group in Ukraine
Security firm ESET has documented the evolution of MATCHBOIL, a downloader used by the UAC-0099 threat group to install spying backdoors on Windows systems in Ukraine.
Everything Threat Times has reported about UAC-0099: 5 stories, newest first. Part of our Malware & Ransomware coverage.

Security firm ESET has documented the evolution of MATCHBOIL, a downloader used by the UAC-0099 threat group to install spying backdoors on Windows systems in Ukraine.

Russian-linked spy group UAC-0099 is upgrading its MatchBoil dropper to evade detection while targeting Ukrainian organizations with cyber-espionage operations.

ESET Research details how the MATCHBOIL downloader, linked to threat actor UAC-0099, has evolved its tactics between 2024 and 2026.

Intelligence reports indicate that the Russia-aligned threat group UAC-0099 has been steadily upgrading its MATCHBOIL downloader malware throughout 2024.

Analysis reveals a Russia-aligned group using the previously undocumented ASHVEIN malware to compromise Ukrainian government personnel, hiding commands in HTML.