Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Kaspersky Securelist reporting from August–September 2026 describes multiple active cyber-threat campaigns and malware developments, including Mirage Kitten backdoors targeting aviation and FinTech in the Middle East and Africa, ValleyRAT delivered as adware, Android malware forming an advertising proxy botnet, HoneyMyte’s kernel-level CoolClient rootkit, Armored Likho espionage tooling, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN’s Google Apps Script and DNS-based command-and-control. The feed also includes quarterly threat statistics covering industrial control,ب