Element

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 4, 2026
Last mentionedSep 4, 2026

Timeline

1 articles · newest first

Angry Birds: Toy Ghouls’ new toys

Kaspersky tracks ransomware group Toy Ghouls deploying new custom backdoors, mqtt-bird-agent and matrix-bird-agent, using HiveMQ MQTT and Element as C2 channels.

Kaspersky SecurelistSep 4, 10:00 UTC · Sep 4, 2026Threat actor2 · 1 read

Appears with

Evil-WinRMproduct · 1
GenieLockermalware · 1
HiveMQorganization · 1
Toy Ghoulsthreat actor · 1
matrix-bird-agentmalware · 1
mqtt-bird-agentmalware · 1
HiveMQproduct · 1
Kasperskyvendor · 1
WinRM-fsproduct · 1
Kasperskyorganization · 1
Elementvendor · 1

Entities are extracted by the model from each article. First seen Sep 4, 2026, last mentioned Sep 4, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.