Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Microsoft Teams-Themed Phishing Campaign Delivers Remote Access
SOC Prime Bias: High
CYFIRMA
Agent Tesla Malware Analysis: Inside the .NET RAT’s Data Theft Capabilities
SOC Prime Bias: High
picussecurity.com
GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain
SOC Prime Bias: High
Synaptic Security Blog
PostCSS Masquerading as a Path to Windows RAT Delivery
SOC Prime Bias: High
JFrog Security Research
PureRAT Variant Discovered in AI Video Player
SOC Prime Bias: High
lukeacha.com
SilverFox-Style Loader Chain Uses Panasonic Shells, Alibaba OSS, and Sauron
SOC Prime Bias: High
Derp
Handala Threat Group: Tactics, Targets, and Attack Timeline
SOC Prime Bias: Critical
picussecurity.com
Someone’s Hands Are on Your Keyboard Then Your Whole Network. Courtesy of ClickFix, Potemkin, RMMProject and EtherRAT
SOC Prime Bias: Critical
Huntress
macOS ClickFix Lures Deploy an AppleScript Stealer and Persistent RAT
SOC Prime Bias: Critical
Netskope
How Sinobi Ransomware Encrypts Files and Destroys Backups
SOC Prime Bias: Critical
picussecurity.com
