Woodgnat Hackers Use Mistic RAT to Broker Access for Ransomware Gangs

Multiple active threats and incidents: the Woodgnat group is deploying the Mistic RAT as a broker tool to sell network access to ransomware gangs; a macOS XPC vulnerability allowed standard users to disable CrowdStrike and Kandji endpoint controls (reported by XM Cyber and since patched); fake GTA 6 “early access” sites and Android/PC lures push malware and crypto scams; malicious npm packages impersonating PostCSS drop a Windows RAT and exfiltrate Chrome passwords; Operation Endgame disrupted StealC, Amadey and SocGholish infrastructure and resulted in mass credential seizures; GhostShell is