Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Kaspersky Securelist reporting from August–September 2026 describes active and emerging threats, including Mirage Kitten malware families NodeRabbit and PollCat targeting aviation and FinTech in the Middle East and Africa; ValleyRAT distributed as adware; malware targeting industrial control systems, Android vehicle head units, and Windows systems; HoneyMyte’s CoolClient kernel rootkit; Armored Likho’s Telegram-stealing Still Toolkit; Head Mare exploitation of unpatched TrueConf servers; and Project CAV3RN using Google Apps Script and DNS-based command-and-control. The feed also includes Q2 -h