MATCHBOIL: New tricks, same old evil intentions
2026-10-09T20:51:32Z•6b3204f18723048e0f24380fc323f5eea9677e1a1b2e342cfcc38806ab746192
AI-securityAPTAmadeyEDR-killerESETFamousSparrowGamaredonMATCHBOILOT-securitySMB-securitySecure-BootSparroWockySprySOCKSStealcUAC-0099UEFIaccount-takeoverinfostealermalwarephishingquishingscamssupply-chain-securitythreat-intelligence
What happened
ESET WeLiveSecurity feed covering threat research, cybercrime, phishing, scams, AI security, SMB defense, and vulnerability disclosures from June through October 2026. Notable items include MATCHBOIL activity attributed to UAC-0099, the SparroWocky backdoor used by FamousSparrow, Gamaredon operations, Amadey and Stealc disruption, EDR-killer tooling, SprySOCKS for Windows, EvilTokens phishing, and vulnerable UEFI shims capable of bypassing Secure Boot.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- 6b3204f18723048e0f24380fc323f5eea9677e1a1b2e342cfcc38806ab746192
- Enrichment time
- 2026-10-09T20:51:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.