Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Kaspersky Securelist reporting from August–September 2026 describes active cyberthreat campaigns involving new malware families, backdoors, rootkits, Android adware and proxy botnets, espionage toolkits, exploitation of unpatched TrueConf servers, and stealthy C2 infrastructure using Google Apps Script and DNS. Targeted sectors and regions include aviation and FinTech in the Middle East and Africa, Israel, industrial automation environments, and video-conferencing users. The feed also summarizes Q2 2026 vulnerability, exploit, malware, and ICS threat trends, including emerging risks involvingن