The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

Kaspersky Securelist RSS entries report multiple 2026 campaigns, including MovieReaper malware distributed through compromised movie torrents with Solana-based C2 concealment; NightEagle intrusions using GhostContainer, GitHub-hosted tools, and Active Directory/RDP exploitation; Toy Ghouls backdoors using MQTT and Matrix for command and control; Mirage Kitten malware targeting aviation and FinTech in the Middle East and Africa; ValleyRAT disguised as adware; Android malware targeting DoFun vehicle head units to create an advertising proxy botnet; HoneyMyte CoolClient with a kernel-level rootkt