Refusal as a security failure mode

UAC-0099 buried a nuclear weapons prompt in a VBS dropper to stall AI-assisted triage

ESET found the bait comment in a loader for MATCHBOIL, malware it ties exclusively to the Russia-aligned group that feeds targets to Sandworm. The trick works because a model that refuses to read a file returns no verdict at all.