Mirage Kitten targets Middle East and Africa region with new malware
2026-07-28T20:51:47Z•5e7cdc524193723657d5efcec06910908b6da68aa1ef5f62bbe687fe1eb3ceb8
APTArcBridgeBitLocker extortionBridgeHeadDNS AAAAGoSerpentMSSQLMicrosoft GraphMirage KittenNightLedgerNimbus ManticoreOkoBot cryptocurrency theftsaler framework?Outlook calendar C2Project CAV3RNRDPRMMSmoke SandstormStowaway RATUNC1549ViPNetcyber-espionagedata exfiltrationransomwaresupply-chain attackweb shells
What happened
Kaspersky Securelist reporting from July 2026 highlights multiple active cyber-threat campaigns, including Mirage Kitten/UNC1549 malware, BitLocker extortion, Project CAV3RN C2, supply-chain abuse of ViPNet updates, GoSerpent espionage, OkoBot cryptocurrency theft, device-code phishing, Armored Likho spear-phishing, and industrial-system threats. The collection indicates high risk across espionage, credential and cryptocurrency theft, ransomware/extortion, phishing, and targeted attacks against government, industrial, and regional organizations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- 5e7cdc524193723657d5efcec06910908b6da68aa1ef5f62bbe687fe1eb3ceb8
- Enrichment time
- 2026-07-28T20:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.