Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist reporting from August–September 2026 covering multiple cyber threats, including Toy Ghouls MQTT and Matrix-based backdoors, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT disguised as adware, industrial control system threats, vulnerabilities and exploits including AI frameworks, Android proxy-botnet malware, HoneyMyte’s kernel-level rootkit, Armored Likho Telegram espionage, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN’s Google Apps Script and DNS-based C2. The collection reflects active espionage, backdoor, rootkit, malware-de