The downloader's compile dates run a year earlier than the first public report of it
2026-10-09Security
ESET's samples of MATCHBOIL, a downloader used by the Russia-aligned group UAC-0099 against Ukrainian targets, carry timestamps from April 2024 — more than a year before CERT-UA first documented the tool. Newer builds poll for a fresh payload every two minutes and refuse to run under analysis.