The invisible passenger in your car

2026-08-21T08:51:46Z89c61eff46bdcdb229bd8b6121582ebdb5b3958a86847b23d8e7ae7595678a3c
.NET NativeAOTAPTAiTM phishingAndroid malwareArmored LikhoCoolClientDNS tunnelingGoogle Apps Script C2HoneyMyteKerberoastingMFA bypassPhantomCorePhantomGraphProject CAV3RNStill ToolkitTelegram theftTrueConf exploitationWindows rootkitadwareautomotive head unitscloud abusecyber espionagekernel rootkitproxy botnetservice workers

What happened

Kaspersky Securelist reports covering emerging cyber threats in August 2026, including Android malware distributed through legitimate automotive head-unit software, a HoneyMyte CoolClient backdoor with a kernel-level rootkit, Armored Likho espionage tooling targeting Telegram data, Head Mare exploitation of unpatched TrueConf servers, Google Apps Script and DNS-based C2 infrastructure, MFA-bypassing adversary-in-the-middle phishing on legitimate cloud platforms, and recent malware trends affecting PCs, mobile devices, IoT, and Brazilian educational institutions.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
kaspersky_securelist
Record identifier
89c61eff46bdcdb229bd8b6121582ebdb5b3958a86847b23d8e7ae7595678a3c
Enrichment time
2026-08-21T08:51:46Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · The invisible passenger in your car · Baitaphish