Jul 242026 Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC0099 Attacks CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every three minutes on Windows.