SecurityThe Hacker Newsabout 2 hours ago
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
1 min read
CERT-UA warned of a campaign using a fake Notepad++ plugin to compromise Windows systems. The Russia-aligned group UAC-0099 delivers MATCHBOIL.V2 via phishing emails with image attachments. The attack chain includes a malicious DLL named NppExport.dll that loads BURNYBEAR and InitTest.dll to establish persistence.
Level
Hype check
Tap to vote and see what everyone thinks.
