Angry Birds: Toy Ghouls’ new toys

Kaspersky reports covering August–September 2026 document multiple active cyber threats, including Toy Ghouls MQTT and Matrix-based backdoors, Mirage Kitten malware targeting aviation and FinTech in the Middle East and Africa, ValleyRAT distributed as adware, Android proxy-botnet malware, HoneyMyte’s kernel-level rootkit, Armored Likho espionage tooling, Head Mare exploitation of unpatched TrueConf servers, and Project CAV3RN’s Google Apps Script and DNS-based command-and-control. The collection also includes industrial control system threat statistics and vulnerability/exploit trends, but noC