Threat actor
Woodgnat
Tracked by CyberSIXT since Jun 24, 2026 · last activity Jun 27, 2026
Linked incidents
Coverage timeline
-
Mistic backdoor uses DLL side load to enable ransomwaresecurityonline.info · Jun 27, 2026
-
Woodgnat IAB Uses Backdoor.Mistic RAT in WordPress, Teams Attackswww.securityweek.com · Jun 24, 2026