Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist reporting from August–September 2026 describes multiple cyber threats, including Toy Ghouls MQTT and Matrix backdoors, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT disguised as adware, Android proxy-botnet malware, HoneyMyte’s kernel-level rootkit, Armored Likho Telegram surveillance, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN using Google Apps Script and DNS-based C2. The feed also includes quarterly threat statistics for industrial automation systems and vulnerabilities, exploits, and C2 frameworks, including AI-related CV