Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist RSS items describe multiple 2026 cyberthreats, including Toy Ghouls MQTT and Matrix-based backdoors, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT disguised as adware, Android proxy-botnet malware, HoneyMyte's kernel-level CoolClient rootkit, Armored Likho Telegram espionage, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN using Google Apps Script and DNS-based C2. The collection also includes industrial-threat and vulnerability trend reports. No specific CVE identifiers are provided in the supplied metadata.