The invisible passenger in your car

Kaspersky Securelist reporting from late July through August 2026 covering Android malware on vehicle head units, a HoneyMyte CoolClient backdoor with a kernel-level rootkit, Armored Likho cyber-espionage activity, Head Mare exploitation of unpatched TrueConf servers, Project CAV3RN C2 using Google Apps Script and DNS routing, phishing kits hosted on legitimate cloud platforms to bypass MFA, Anatsa mobile banking malware, and attack techniques including Kerberoasting and DNS tunneling. The collection represents active malware, APT, credential theft, evasion, and initial-access threats, but noC