#5
SecurityWeek
general
June 24, 2026 at 11:42 UTC
New ‘Mistic’ RAT Opens Door to Several Ransomware Families
By Ionut Arghire
AI Summary
A newly identified RAT named 'Mistic' is being deployed by initial access broker 'Woodgnat' (also tracked as KongTuke) to provide entry points for at least six ransomware families: Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta. Attacks have targeted organizations in insurance, education, IT, and professional services sectors, making Mistic a high-priority indicator of compromise for threat hunters tracking ransomware precursor activity.
Relevance score: 83.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →