Angry Birds: Toy Ghouls’ new toys

Kaspersky Securelist Version 1 original current

Imported from official source

Kaspersky GERT experts have discovered new backdoors used by the Toy Ghouls group. One version of the backdoor uses the HiveMQ MQTT broker as its command-and-control server; the other uses the Matrix-based Element messenger.

This version

Version
1 of 1
Recorded
September 20, 2026 19:52
Change
Initial
Content hash
001a0927afce2a57119a184c2a99fcba
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.