THREAT OPS › Threat News › Angry Birds: Toy Ghouls’ new toys
Angry Birds: Toy Ghouls’ new toys
<p><img alt="" class="attachment-securelist-huge-promo size-securelist-huge-promo wp-post-image" height="400" src="https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/09/04075246/toy-ghouls-birds-backdoor-featured-image-990x400.jpg" width="990" /></p><h2 id="introduction">Introduction</h2> <p>We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and
MITRE ATT&CK techniques
Indicators of compromise
- bfadbeee63a4f0bf19ec9deb8fa58f58md5
- 7916c33688385525078bee504c90f359md5
- https://securelist.ru/tr/toy-ghouls/115909/url
- http://ip-api.com/jsonurl
- https://opentip.kaspersky.com/bfadbeee63a4f0bf19ec9deb8fa58f58/results?icid=gl_sl_post-opentip_sm-team_acad5c293bfe5673&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/7916c33688385525078bee504c90f359/results?icid=gl_sl_post-opentip_sm-team_7c20b8cd0c940e45&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/meet.element.tw/?icid=gl_sl_post-opentip_sm-team_98bbbd1d33fd4fd3&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- media.kasperskycontenthub.comdomain
- broker.hivemq.comdomain