Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist reporting from August–September 2026 covers multiple advanced and financially motivated threats, including Toy Ghouls backdoors using MQTT and Matrix/Element for command and control, Mirage Kitten malware targeting aviation and FinTech in the Middle East and Africa, ValleyRAT distributed as adware, Android malware targeting automotive head units to create an advertising and proxy botnet, and HoneyMyte’s CoolClient with a kernel-level rootkit. Additional reporting describes cyber-espionage campaigns using Telegram data theft, exploitation of unpatched TrueConf servers, and—