> TritonInfoSec News
Home / Jul 26, 2026 / Story
0
#8 The Hacker News general July 24, 2026 at 06:50 UTC

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

By [email protected] (The Hacker News)

AI Summary

CERT-UA has attributed a new campaign to Russia-aligned threat cluster UAC-0099, which is now delivering the MATCHBOIL.V2 malware disguised as a legitimate Notepad++ plugin to compromise Windows systems. UAC-0099 previously weaponized WinRAR vulnerabilities and continues to evolve its delivery mechanisms against Ukrainian targets. Defenders should treat unsolicited Notepad++ plugins as high-risk and implement application allowlisting to block unauthorized plugin execution.

Read full article → https://thehackernews.com/2026/07/fake-notepad-plu…

Relevance score: 76.0/100

# More from July 26

  1. 1
    Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available The Hacker News
  2. 2
    Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE The Hacker News
  3. 3
    Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git The Hacker News
  4. 4
    BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery The Hacker News
  5. 5
    Default Azure Automation Setting Enables Cross-Tenant Identity Takeover Dark Reading
  6. 6
    Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable The Hacker News
  7. 7
    Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts BleepingComputer
  8. 9
    Golden Chickens Resurfaces With Four New Malware Families and Modular Implants The Hacker News
  9. 10
    Hermes AI agent used to automate attack on Thai Finance Ministry BleepingComputer