UAC-0099 embeds decoy nuclear-weapon request in VBScript to trip LLM scanner guardrails ahead of MATCHBOIL loader (GuardBreaker)
ESET researchers observed the Russia-aligned group UAC-0099 embedding a decoy request for guidance on building a nuclear weapon in a comment inside a VBScript used in the early stages of an attack on a target in Ukraine. The comment was meant to trigger the safety guardrails of an LLM-powered code scanner so that it stops inspecting the f…