Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Fake Zoom installer uses .NET downloader to deliver Overlord RAT on macOS
SOC Prime Bias: High
jamfsoftware
UAC-0145 Targets Victims Through Recruitment-Themed Social Engineering
SOC Prime Bias: Critical
cert.gov.ua
macOS Infostealer Targets Cryptocurrency Wallets
SOC Prime Bias: High
Huntress
Critical N-central Security Flaw Triggers Active Exploitation
SOC Prime Bias: Critical
Huntress
Larva-26005: Tracing Xctdoor’s Connection to CRAT Attacks
SOC Prime Bias: Critical
ASEC
Dropping Elephant APT: Patchwork’s Espionage Tactics and Toolset
SOC Prime Bias: Critical
picussecurity.com
macOS ClickFix Campaign Evolves with Cloaked Infection Gates
SOC Prime Bias: High
Microsoft Security Blog
Xeno Roblox Cheat Lures Deploy a Java-Based Infostealer
SOC Prime Bias: High
Bitdefender Labs
SMOKE#SCREEN Abuses ScreenConnect and Cloudflare Tunnels
SOC Prime Bias: High
Securonix
SmartApeSG Pushes an Unknown RAT Through ClickFix Lures
SOC Prime Bias: High
malware-traffic-analysis.net
