Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
The Not-So-Silent Miner: Endpoint-Based Cryptominer Compilation
SOC Prime Bias: High
Huntress
The Stealer Factory: Python-Powered MaaS for Building Infostealers
SOC Prime Bias: High
K7 Labs
Kothamine Malware Leverages Tailcat for Stealthy Network Access
SOC Prime Bias: High
Malwarebytes
BotHelper RAT Delivers Encrypted Payloads for Live Screen Surveillance
SOC Prime Bias: High
Point Wild
Macfinger ClickFix Campaign: Analyzing the Malware
SOC Prime Bias: High
SANS Internet Storm Center
Storm-2570 Reuses the Same Tradecraft Across Multiple Deployments
SOC Prime Bias: Critical
Microsoft Security Blog
PureRAT and PureLogs Campaign Targeting Japanese Organizations
SOC Prime Bias: High
Researcher Blog - ITOCHU Cyber & Intelligence Inc.
Novel Malware Designed to Withstand Analyst Scrutiny
SOC Prime Bias: Critical
malbearlabs.com
The Psychedelic Stealer: When a CAPTCHA Becomes an Installer
SOC Prime Bias: High
Arctic Wolf
AvisLoader Emerges as a Resilient Windows Malware Loader
SOC Prime Bias: High
varonis.com
