UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

October 8, 2026 · 9:00 am 4 sources

Image: Help Net Security

Coverage

Coverage

• What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
  Help Net Security · October 8, 2026 09:00
  ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in ESET’s telemetry was in Ukraine: transportation…
• Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
  The Record by Recorded Future News · October 8, 2026 12:30
  Russian-aligned hackers have targeted Ukrainian transportation, manufacturing and energy companies with a constantly evolving malware strain designed to harvest system data, according to new research.
• Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware
  Infosecurity Magazine · October 8, 2026 13:00
  Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024

More coverage

• UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
  The Hacker News · October 8, 2026 15:26
  The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company…