The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

Kaspersky Securelist RSS entries describe multiple malware and APT campaigns reported in August–September 2026, including torrent-delivered MovieReaper trojans using Solana for C2 concealment; NightEagle activity against Russian organizations involving GhostContainer, GitHub-hosted tools, Active Directory and RDP exploitation; Toy Ghouls backdoors using MQTT and Matrix/Element C2; Mirage Kitten malware targeting aviation and financial organizations; ValleyRAT distributed as adware; Android proxy-botnet malware targeting vehicle head units; HoneyMyte CoolClient with a kernel-level rootkit; and8