Spotted in intrusions targeting insurance, education, IT, and professional services sectors

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education, IT, and professional services sectors.

Symantec and Carbon Black link Mistic backdoor attacks to KongTuke, using ClickFix lures and in-memory execution for stealthy access.

Spotted in intrusions targeting insurance, education, IT, and professional services sectors