Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web3 Sector
SOC Prime Bias: Critical
Arctic Wolf
New Malware SLOTAGENT Supporting BOF Execution Published
SOC Prime Bias: Medium
IIJ Security Diary
The Month of Bypasses: What Defender Misses
SOC Prime Bias: Medium
PSI | Nemesis
Crypto Drainers as a Converging Threat: Insights into Emerging Hybrid Attack Ecosystems
SOC Prime Bias: Medium
levelbluecyber
Rebex-based Telegram RAT Targeting Vietnam
SOC Prime Bias: Medium
dmpdump
Fake Document, Real Access: Foxit Impersonation Enables Stealth VNC Control
SOC Prime Bias: Medium
gdatasoftware.com
Inside A Telegram Session Stealer: How A Pastebin-Hosted PowerShell Script Targets Desktop And Web Sessions
SOC Prime Bias: Medium
Flare
Inside Vidar 2026: From Infection to Memory Execution
SOC Prime Bias: Medium
Point Wild
ESET Research GopherWhisper: A burrow full of malware
SOC Prime Bias: Critical
welivesecurity.com
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting
SOC Prime Bias: Critical
The DFIR Report