Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

A malicious program disguised as a Notepad++ plugin is being used to compromise Windows systems in a new campaign. The Computer Emergency Response Team of Ukraine has attributed this activity to a threat cluster known as UAC-0099, which is aligned with Russia. This group has previously exploited security flaws in WinRAR software. The campaign delivers malware known as MATCHBOIL.V2. UAC-0099 is the threat cluster responsible for the attacks. The malicious plugin is a tactic used by the group to gain access to Windows systems.