Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Malware Phishing/Scam: Phishing Emails Disguised as Transaction Receipts
SOC Prime Bias: High
ASEC
C2Looper Uses GitHub C2 in Suspected Ransomware Operations
SOC Prime Bias: High
zscaler.com
AI Across the Cyber Intrusion Lifecycle
SOC Prime Bias: High
gambit.security
Evooo1Bot Linux Botnet: Capabilities and Attack Techniques
SOC Prime Bias: Critical
Fortinet Blog
China-Nexus Actor Uses VHD Files to Target Myanmar Diplomats
SOC Prime Bias: High
Seqrite Labs
Mandatory User Profile Persistence
SOC Prime Bias: Medium
Purple Team
Gunra Ransomware: SafeBreach Coverage for CISA Alert AA26-222A
SOC Prime Bias: Critical
SafeBreach
Akira Hits Safe Mode: Ransomware Rebooting Around EDR
SOC Prime Bias: High
Huntress
SpaceX1337 ClickFix Leads to Hands-on-Keyboard AD Compromise
SOC Prime Bias: Critical
Deception.Pro Blog
ShieldBreak Zero-Day Targets Windows Defender
SOC Prime Bias: Critical
GitHub
