Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
ESET Research FishMonger’s arsenal upgraded: SprySOCKS for Windows
SOC Prime Bias: Critical
welivesecurity.com
SloppyLemming Attack Techniques & BurrowShell Backdoor Explained
SOC Prime Bias: Critical
picussecurity.com
Inside a Deno-Based Proxy and RAT
SOC Prime Bias: High
InfoGuard Labs
Operation Poisson: Breaking Down an Entire Cybercriminal Operation
SOC Prime Bias: High
Cato Networks
How a VHDX File Delivers Remcos RAT
SOC Prime Bias: High
SANS Internet Storm Center
UNC1549 TTPs: Iranian APT Targeting Aerospace and Defense
SOC Prime Bias: Critical
picussecurity.com
ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit
SOC Prime Bias: Critical
Google Cloud Blog
Interlock and Rhysida: AI in the Ransomware Ecosystem
SOC Prime Bias: Critical
ibm.com
OnyxC2: A New Stealer Targeting 210 Applications
SOC Prime Bias: High
BlackFog
Analyzing SHEET#CREEP: The Malware Returns with New Config Obfuscation
SOC Prime Bias: Critical
Securonix
