Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker

Stealthy new backdoor used in cybercrime intrusions since April 2026 may be associated with Woodgnat (aka KongTuke), an initial access broker whose ModeloRAT toolkit has fed Qilin and other ransomware operations.

View Post on Scour ↗

More from security.com on Scour.

Covered by 4 sources including Help Net Security, CSO Online