Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
AI Summary
A self-destructing backdoor named Mistic has been linked to a cybercriminal access broker who sells corporate footholds to ransomware gangs. These intrusions have primarily targeted insurance, education, IT, and professional services sectors in the UK.
Spotted in intrusions targeting insurance, education, IT, and professional services sectors