Sandworm Refines Matchboil Downloader Amid Ukrainian Attacks
ESET attributes ongoing Ukrainian disruption to Russia-aligned threat group UAC-0099, which since 2024 refined the Matchboil downloader. The malware now supports recurring C2 traffic, improved evasion, and delivery of the Matchwok backdoor, targeting Ukrainian transport, energy, and manufacturing sectors to sustain intrusions. This broadens impact.










