Mistic Backdoor Abuses Microsoft Endpoint Security Naming to Hide in Corporate Networks

A new backdoor called Mistic is being used in financially motivated intrusions against corporate networks, with evidence pointing to a possible link to the Woodgnat initial access broker. The Symantec Threat Hunter Team said Mistic has appeared in attacks since April 2026 and has targeted organizations in insurance, education, information technology, and professional services. The […] The post Mistic Backdoor Abuses Microsoft Endpoint Security Naming to Hide in Corporate Networks appeared first on VPN Central.