The invisible passenger in your car
2026-08-21T08:51:46Z•89c61eff46bdcdb229bd8b6121582ebdb5b3958a86847b23d8e7ae7595678a3c
.NET NativeAOTAPTAiTM phishingAndroid malwareArmored LikhoCoolClientDNS tunnelingGoogle Apps Script C2HoneyMyteKerberoastingMFA bypassPhantomCorePhantomGraphProject CAV3RNStill ToolkitTelegram theftTrueConf exploitationWindows rootkitadwareautomotive head unitscloud abusecyber espionagekernel rootkitproxy botnetservice workers
What happened
Kaspersky Securelist reports covering emerging cyber threats in August 2026, including Android malware distributed through legitimate automotive head-unit software, a HoneyMyte CoolClient backdoor with a kernel-level rootkit, Armored Likho espionage tooling targeting Telegram data, Head Mare exploitation of unpatched TrueConf servers, Google Apps Script and DNS-based C2 infrastructure, MFA-bypassing adversary-in-the-middle phishing on legitimate cloud platforms, and recent malware trends affecting PCs, mobile devices, IoT, and Brazilian educational institutions.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- 89c61eff46bdcdb229bd8b6121582ebdb5b3958a86847b23d8e7ae7595678a3c
- Enrichment time
- 2026-08-21T08:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.