What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

Reported by Help Net Security (Mirko Zorz)

Summary by Cyber Security News8 Oct 2026, 11:00 CEST

About this summary. This is a short, independently written summary of an article first published by Help Net Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/10/08/matchboil-malware-uac-0099/

ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in ESET’s telemetry was in Ukraine: transportation companies in July and August 2025, a manufacturer in December 2025, and an energy company in June 2026.

Read the full article at Help Net Security →