Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist reporting from August–September 2026 describes multiple active cyberthreats, including Toy Ghouls MQTT and Matrix-based backdoors, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT distributed as adware, industrial-control threats, Android proxy-botnet malware, HoneyMyte’s kernel-level rootkit, Armored Likho Telegram surveillance, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN’s Google Apps Script and DNS-based C2. The collection reflects high-impact espionage, persistence, defense evasion, credential/data theft, and critical-in بال?