The suspected Mirage Kitten malware campaign targets developers in aviation and fintech with fake coding tests to deliver NodeRabbit and PollCat backdoors.

Related Posts:

• US Offers $10M for IRGC Cyber Leader
• Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules
• Toy Ghouls Backdoor Uses HiveMQ and Element for C2

The post Mirage Kitten Malware Targets Aviation and Fintech Sectors appeared first on Daily CyberSecurity.

The Toy Ghouls backdoor hides C2 traffic in HiveMQ MQTT and Element messenger. See how the Bearlyfy group's custom malware works.

Related Posts:

• US Offers $10M for IRGC Cyber Leader
• Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules
• AWS Password Spraying Campaign Targets Root Accounts

The post Toy Ghouls Backdoor Uses HiveMQ and Element for C2 appeared first on Daily CyberSecurity.

Discover the details of the experimental HardBreacher exploit targeting a potential zero-day vulnerability within Kaspersky Endpoint Security for privilege escalation.

Related Posts:

• PoC Published for Linux Kernel Privilege Escalation CVE-2026-52933 Flaw
• CVE-2026-81578 & CVE-2026-82078: PaperCut Zero-Day Exploited, PoC Public
• High-Severity Composer Flaw Enables Command Execution

The post HardBreacher Exploit Targets Kaspersky appeared first on Daily CyberSecurity.

Kaspersky uncovered the Armored Likho Still Toolkit. Read our Armored Likho Still Toolkit analysis to explore the Telegram stealer and audio spying tools.

Related Posts:

• PATCHCORD Malware Hits Afghan Telecom in New APT36 Campaign
• HoneyMyte CoolClient Rootkit Deploys Kernel Driver
• DOJ Charges 17 Iranians in Mabna Institute Cyber Theft

The post Armored Likho Still Toolkit Deploys Covert Spying Implants appeared first on Daily CyberSecurity.

Kaspersky analyzed the Project CAV3RN framework. Read our Project CAV3RN framework analysis to see how attackers abuse DNS and Google Apps Script.

Related Posts:

• Kimwolf Botnet Malware Upgrades DDoS and C2 Defenses
• DeadLock Ransomware Employs Decentralized Infrastructure
• Apple Sends Mercenary Spyware Alerts to Users in 110+ Countries

The post Project CAV3RN Framework Adds DNS and Google Relays appeared first on Daily CyberSecurity.