Hackers Weaponize Notepad++ 8.8.3 to Silently Install MATCHBOIL.V2 Malware

CERT-UA has disclosed a significant shift in the tactics of threat cluster UAC-0099 , revealing a novel infection chain that abuses a legitimate Notepad++ 8.8.3 executable to sideload malware, alongside an upgraded MATCHBOIL.V2 loader and two new tools named LUNCHPOKE and BURNYBEAR. The campaign, documented since mid-summer 2026, marks a notable evolution from the group’s earlier MATCHBOIL and MATCHWOK toolset that CERT-UA previously linked to phishing operations…