Angry Birds: Toy Ghouls’ new toys

Kaspersky reporting from August–September 2026 describes multiple campaigns and malware developments, including MQTT- and Matrix-based backdoors, new Mirage Kitten malware, ValleyRAT disguised as adware, Android proxy-botnet malware, a kernel-level CoolClient rootkit, Telegram-stealing tooling, exploitation of unpatched TrueConf servers, and Google Apps Script/DNS-based C2. The collection also covers industrial-control-system threats and broader vulnerability and exploit trends, including AI framework vulnerabilities.