Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist threat intelligence covering multiple 2026 campaigns and reports, including Toy Ghouls MQTT and Matrix backdoors, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT disguised as adware, industrial control system threats, vulnerabilities in AI frameworks, Android proxy-botnet malware, HoneyMyte’s kernel-level CoolClient rootkit, Armored Likho Telegram surveillance, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN’s Google Apps Script and DNS-based C2. The collection reflects active espionage, malware distribution, stealth, credential or5