Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
SOC Prime Bias: Critical
Trend Micro
Safetica contains a kernel driver vulnerability
SOC Prime Bias: Critical
Software Engineering Institute
SOLYXIMMORTAL : PYTHON MALWARE ANALYSIS
SOC Prime Bias: Medium
CYFIRMA
When Malware Authors Troll Security Researchers
SOC Prime Bias: Medium
profero.io
Can You Overuse LOLBins to Deliver RAT Payloads?
SOC Prime Bias: Medium
Malwarebytes
UAT-8837 Targets Critical Infrastructure Across North America
SOC Prime Bias: Critical
Cisco Talos Blog
BigSquatRat npm Package Campaign Analysis
SOC Prime Bias: Critical
kmsec.uk
Operation Nomad Leopard: Targeted Spear-Phishing Campaign Against Government Entities in Afghanistan
SOC Prime Bias: Critical
Seqrite
How Threat Actors Are Weaponizing Microsoft Visual Studio Code
SOC Prime Bias: Critical
jamfsoftware
Dissecting CrashFix: KongTuke’s New Toy
SOC Prime Bias: Critical
Huntress
