Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist reports covering August–September 2026 threat activity, including new backdoors and C2 channels, APT campaigns targeting aviation, finance, industrial and Middle Eastern organizations, malware disguised as adware or legitimate software, Android proxy-botnet activity, kernel-level rootkits, exploitation of unpatched TrueConf servers, and Google Apps Script/DNS-based C2 evasion. The collection includes both targeted espionage campaigns and broader vulnerability and industrial-threat reporting.