New 'Mistic' RAT Opens Door to Several Ransomware Families

A newly identified remote access trojan called Mistic is being used by Woodgnat, an initial access broker that resells footholds to multiple ransomware operations, including Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta. The tool gives one access broker reach into several major ransomware ecosystems at once, making Mistic infections a high-value detection target for incident responders.