UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis
Russia-aligned threat actor UAC-0099 has deployed a technique called GuardBreaker that embeds nuclear weapon prompts inside malicious VBS scripts to deliberately trigger LLM safety guardrails and prevent AI-assisted malware analysis. This represents a maturing offensive tradecraft where adversarial prompt injection is weaponised not to extract information but to induce refusal states in AI security tooling. The technique mirrors similar tactics observed in the TeamPCP supply chain campaigns, signalling that LLM-first security pipelines are becoming a recognised and actively exploited weak point.
