Russia-Aligned UAC-0099 Uses GuardBreaker to Disrupt AI Malware Analysis

Russia-aligned threat actor UAC-0099 has embedded a weapon-related prompt in a malicious Visual Basic Script (VBS) comment to trigger an LLM safety refusal and interfere with AI-assisted malware analysis against a target in Ukraine. The script is designed to download and install MATCHBOIL, a C# loader used by the group to deliver additional payloads.