Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Kaspersky Securelist reporting from August–September 2026 covers active cyber-espionage and malware campaigns, including Mirage Kitten malware targeting aviation and FinTech in the Middle East and Africa; ValleyRAT distributed as adware; Android malware targeting DoFun vehicle head units to create an advertising proxy botnet; HoneyMyte’s CoolClient with a kernel-level Windows rootkit; Armored Likho’s Telegram theft and eavesdropping toolkit; Head Mare exploitation of unpatched TrueConf servers; and Project CAV3RN using Google Apps Script relays and DNS-based C2 selection. Additional reports4?