KongTuke - f4n6

notes

Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs

1. Executive summary A new backdoor tracked as Mistic (also tracked as MLTBackdoor) has been deployed in financially motivated intrusions since April 2026, targeting organisations across

26 Jun 2026 · 8 min read read →

notes

Stealthy new backdoor emerges in attacks on multiple sectors

1. Executive summary Symantec and Carbon Black's Threat Hunter Team have identified a new backdoor dubbed Mistic (also tracked as MLTBackdoor by Zscaler) deployed

25 Jun 2026 · 8 min read read →

notes

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

1. Executive summary A new stealthy backdoor dubbed Mistic (also tracked as MLTBackdoor) has been deployed in financially motivated attacks against organisations in the insurance, education,

25 Jun 2026 · 8 min read read →