MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2

MATCHBOIL’s evolution from a basic C# downloader into a more evasive implant supporting recurring command-and-control communication. Operated by UAC-0099, the malware now incorporates sandbox checks, commercial .NET obfuscation, deceptive interfaces, and revised persistence mechanisms, reflecting sustained development across samples spanning April 2024 through April 2026. Compilation timestamps suggest earlier development, although timestamps alone do not […] The post MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

First seen on gbhackers.com

Jump to article: gbhackers.com/matchboil-malware/