Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Free Converter Software – Convert Any System from Clean to Infected in Seconds
SOC Prime Bias: Medium
nextron-systems.com
DeadLock: Ransomware Gang Uses Smart Contracts to Mask Its Work
SOC Prime Bias: High
TheRegister
LOTUSLITE Campaign: Targeted Espionage Driven by Geopolitical Narratives
SOC Prime Bias: Critical
Acronis
How real software downloads can hide remote backdoors
SOC Prime Bias: Critical
Malwarebytes
Prince of Persia APT Analysis: Infy, Foudre, and Tonnerre Malware
SOC Prime Bias: Critical
picussecurity.com
“Unreliable Fund”: Targeted cyberattacks UAC-0190 against Ukrainian Defense Forces using PLUGGYAPE
SOC Prime Bias: Critical
cert.gov.ua
SHADOW#REACTOR – TEXT-ONLY STAGING, .NET REACTOR, AND IN-MEMORY REMCOS RAT DEPLOYMENT
SOC Prime Bias: Medium
Securonix
Gamaredon: Abusing BITS for “Windows Update”-Style Malware Delivery
SOC Prime Bias: Critical
Synaptic Security Blog
Inside SafePay: Analyzing the New Centralized Ransomware Group
SOC Prime Bias: High
picussecurity.com
Hunting Lazarus: Inside the Contagious Interview C2 Infrastructure
SOC Prime Bias: Critical
Red Asgard