UAC-0099 Inserts Nuclear Prompt in VBS to Trigger LLM Refusals Against Ukrainian Targets

{"ESET identified the GuardBreaker technique in late September 2026 samples targeting Ukrainian infrastructure. The VBS script downloads MATCHBOIL, a C# loader previously tied to UAC-0099 operations against transportation and energy networks. CERT-UA had already flagged the same loader in July 2026 when it arrived disguised as a Notepad++ plugin. The prompt injection sits in a comment block, exploiting pipelines that feed untrusted files directly to LLMs without isolation.","This tactic mirrors the Mini Shai-Hulud campaigns documented by Socket in June 2026, where biological and nuclear weapon text was injected into Python packages to derail naive LLM scanners. Those operations were initially attributed to TeamPCP before source code leaks allowed reuse. UAC-0099's adoption shows state-aligned actors copying criminal supply-chain methods once they become public, expanding the attack surface beyond opportunistic crime groups.","The nuclear proliferation angle adds operational weight. Prompt injection that reliably trips safety guardrails can delay or block automated detection of loaders used to stage further payloads in critical infrastructure. No independent technical attribution currently links the samples to Russian state entities beyond UAC-0099's historical targeting patterns and infrastructure overlap.","Next steps include monitoring whether MATCHBOIL variants continue to carry adversarial prompts and whether energy sector victims show delayed incident response timelines consistent with LLM-assisted workflows. Procurement records for AI security tooling in Ukrainian government agencies will indicate how widely these fragile pipelines remain deployed."}