Security News Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks TheHackerNews Daniel Bender 24 Jul 2026 Share CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every three minutes on Windows.