Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
THREAT OF THE MONTH
Gamaredon (Primitive Bear) APT Profile with MITRE ATT&CK Mapping
SOC Prime Bias: Critical
picussecurity.com
ClearFake Campaigns Use WordlistLoader to Deploy Amatera
SOC Prime Bias: High
GenThreatLabs
Malware-as-a-Service Cocktail: ErrTraffic, Cruciferra, and EDR Evasion
SOC Prime Bias: Critical
eSentire
DEF CON-Themed Phishing Abuses Google Apps Script for Malware Delivery
SOC Prime Bias: High
Huntress
SilkParasite Targets Central Asia in China-Nexus APT Campaigns
SOC Prime Bias: High
Bitdefender_Ent
UAT-10147 Uses SPECTRE for Cross-Platform Persistence and Evasion
SOC Prime Bias: Critical
Cisco Talos Blog
Malware Campaign Targets Korean Web Servers Running SoftEther VPN
SOC Prime Bias: High
ASEC
Fake Claude Search Results Lead macOS Users to MacSync Stealer
SOC Prime Bias: High
Huntress
Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline
SOC Prime Bias: High
Rapid7
Tracking MacSync Stealer Infrastructure with Behavioral Analysis
SOC Prime Bias: High
Microsoft Security Blog
AZALEA RAT Delivered Through a Stealthy Batch Script
SOC Prime Bias: High
Point Wild
