Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Behind the Refund: From GST Phishing to Remcos RAT Through a Multi-Stage .NET Infection Chain
SOC Prime Bias: High
Seqrite Labs
Inside TAG-150’s Evolving Tradecraft with DinDoor, DenoRAT, and NightshadeC2
SOC Prime Bias: High
eSentire
ACR Stealer: Two Observed Intrusion Chains During Increased Threat Activity
SOC Prime Bias: High
Microsoft Security Blog
LABUBARAT: Rust-Based RAT Posing as NVIDIA Software
SOC Prime Bias: High
Blackpoint Cyber
SharpViewStateKing and the Anatomy of a Stealthy Implant Framework
SOC Prime Bias: Critical
Canadian Centre for Cyber Security
Six Minutes to Compromise: AI-Built C2 Botnet Deployed by Patriot Bait
SOC Prime Bias: High
Trend Micro
Primary Compromise Vectors Used by UAC-0145 as of July 2026
SOC Prime Bias: Critical
cert.gov.ua
Inside a Threat Hunting Case Study on Scattered Spider
SOC Prime Bias: High
intel471.com
LegacyHive: The Windows User Profile Service Bug That Loads Another User’s Registry Hive Nightmare
SOC Prime Bias: Critical
core-jmp
Tracking a DoNot (APT-C-35) Intrusion Against Bangladesh Military Personnel
SOC Prime Bias: Critical
cyderes.com
