THREAT OPS › Threat News › Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
<p><img alt="" class="attachment-securelist-huge-promo size-securelist-huge-promo wp-post-image" height="400" src="https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/08/31212151/SL-NodeRabbit-PollCat-featured-990x400.jpg" width="990" /></p><p>While monitoring Mirage Kitten activity, we uncovered a previously undocumented malware family that we dubbed NodeRabbit. We identified t
Attributed threat actors
- Ke3changG0004
MITRE ATT&CK techniques
Indicators of compromise
- 1ea83e4e4592b01e4acab63eb867bee5md5
- 810f8e3b88eb05f710c09552941d6f56md5
- cbaaf0900a13f28e380f49adecec932cmd5
- 366515822d5ac1cc500711ef57a2e32emd5
- cf449f1992c2819e62ac44a0b06ac2e7md5
- e95a4366686e3f786ea3c056fab5b0damd5
- de5af16a3757ef700b01dc34d67079aemd5
- be086789568441d0d7e4679aee51f566md5
- e259c5edf158aac4cfe14f77ddd0b196md5
- 291ac3abe73c5158e59a437b75d5f0aamd5
- 0962f56d7ec69f4f2a0162dcbe22116bmd5
- 795e053a990a1569ffdcb57f48f6d085md5
- https://plugplay.azurewebsites.neturl
- https://Rgbteller.azurewebsites.neturl
- https://Wslwebui.azurewebsites.neturl
- https://visitfinancedentists.comurl
- https://kyrasey-f8hfexa5cqamh7fk.westeurope-01.azurewebsites.neturl
- https://healthcomfsdpower.comurl
- https://lifespotify.com/api/users/b879746e-fed9-4211-a6da-4d8223681267/otp/validateurl
- https://sahi-finance.comurl
- https://GamebarAppinformation.azurewebsites.neturl
- https://GamebarApp.azurewebsites.neturl
- https://research.checkpoint.com/2026/fast-and-furious-nimbus-manticore-operations-during-the-iranian-conflict/url
- https://www.kaspersky.com/enterprise-security/threat-intelligence-reporting?icid=gl_sl_tip-lnk_sm-team_c09760866e96002eurl
- https://opentip.kaspersky.com/cbaaf0900a13f28e380f49adecec932c/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_57e8e1197cdb0f91url
- https://opentip.kaspersky.com/1ea83e4e4592b01e4acab63eb867bee5/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_09507c58937aa188url
- https://opentip.kaspersky.com/366515822d5ac1cc500711ef57a2e32e/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_c8d51068c089a549url
- https://opentip.kaspersky.com/cf449f1992c2819e62ac44a0b06ac2e7/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_e2208db43d244c15url
- https://opentip.kaspersky.com/e95a4366686e3f786ea3c056fab5b0da/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_e120c5fd05fc0df2url
- https://opentip.kaspersky.com/de5af16a3757ef700b01dc34d67079ae/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_650eea070d3c5d78url
- https://opentip.kaspersky.com/be086789568441d0d7e4679aee51f566/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_8956410844608d0burl
- https://opentip.kaspersky.com/e259c5edf158aac4cfe14f77ddd0b196/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_39bb3abad7317da9url
- https://opentip.kaspersky.com/291ac3abe73c5158e59a437b75d5f0aa/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_78c7e744fec93e7durl
- https://opentip.kaspersky.com/0962f56d7ec69f4f2a0162dcbe22116b/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_3e97d177f2edd270url
- https://opentip.kaspersky.com/795e053a990a1569ffdcb57f48f6d085/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_3dcdbff1ae45c1b6url
- https://opentip.kaspersky.com/oracle-challenge.s3.us-east-1.amazonaws.com/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_6b47ff5cd74b895burl
- https://opentip.kaspersky.com/naturalapplication.azurewebsites.net/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_057f24494377ef15url
- https://opentip.kaspersky.com/retaildemo.azurewebsites.net/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_235a98efb6fd55cdurl
- https://opentip.kaspersky.com/tubitak.azurewebsites.net/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_256d3b33ee6cb102url
- https://opentip.kaspersky.com/rgbteller.azurewebsites.net/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_ee38f10b3d69e00durl