CERT24New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT CampaignsLoading data…
CERT24Threat Observatory
Period

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

Since April 2026, attacks involving the Mistic backdoor have been observed against multiple organizations in the insurance, education, IT, and professional services sectors. The attacks are described as suspected financially motivated activity, and the backdoor is linked to KongTuke and ModeloRAT.

← Back to intelligence

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

Since April 2026, attacks involving the Mistic backdoor have been observed against multiple organizations in the insurance, education, IT, and professional services sectors. The attacks are described as suspected financially motivated activity, and the backdoor is linked to KongTuke and ModeloRAT.