Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
- Posted on July 24, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every three minutes on Windows.