Mirage Kitten targets Middle East and Africa region with new malware

Kaspersky Securelist threat intelligence feed covering July 2026 reporting on state-sponsored and criminal campaigns, including Mirage Kitten tooling, BitLocker extortion, Project CAV3RN C2 via Microsoft Graph and DNS AAAA records, ViPNet update-system abuse, GoSerpent and OkoBot malware, industrial control system threats, device-code phishing, Armored Likho’s BusySnake Stealer, and compromise-assessment findings. The material describes significant espionage, credential and cryptocurrency theft, ransomware/extortion, supply-chain, and ICS risks, but no specific CVEs are identified in the feed.