As cited
Copy frozen at (site build).
threat intel
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
ESET researchers documented nearly two years of development for MATCHBOIL, a downloader used by Russia-aligned group UAC-0099 to deploy a spying backdoor on Windows machines. The malware has targeted victims exclusively in Ukraine, including transportation companies, a manufacturer, and an energy infrastructure. The tool creates persistent access through a secondary spying program installed after initial compromise.
Why it matters: Ukrainian organizations in transportation, manufacturing, and energy sectors face ongoing risk from this backdoor deployment chain; security teams should monitor for MATCHBOIL delivery and implement detection for UAC-0099 tactics targeting critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
ESET researchers documented nearly two years of development for MATCHBOIL, a downloader used by Russia-aligned group UAC-0099 to deploy a spying backdoor on Windows machines. The malware has targeted victims exclusively in Ukraine, including transportation companies, a manufacturer, and an energy infrastructure. The tool creates persistent access through a secondary spying program installed after initial compromise.
Why it matters: Ukrainian organizations in transportation, manufacturing, and energy sectors face ongoing risk from this backdoor deployment chain; security teams should monitor for MATCHBOIL delivery and implement detection for UAC-0099 tactics targeting critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
ESET researchers documented nearly two years of development for MATCHBOIL, a downloader used by Russia-aligned group UAC-0099 to deploy a spying backdoor on Windows machines. The malware has targeted victims exclusively in Ukraine, including transportation companies, a manufacturer, and an energy infrastructure. The tool creates persistent access through a secondary spying program installed after initial compromise.
Why it matters: Ukrainian organizations in transportation, manufacturing, and energy sectors face ongoing risk from this backdoor deployment chain; security teams should monitor for MATCHBOIL delivery and implement detection for UAC-0099 tactics targeting critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker