Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
ClickFix Case Study: DarkGate Malware
SOC Prime Bias: Medium
Point Wild
Browser Hijacking: Analysis of Three Techniques
SOC Prime Bias: Medium
gdatasoftware.com
APT15 Cyber Espionage: Campaigns and TTPs Analysis
SOC Prime Bias: Critical
picussecurity.com
PyStoreRAT: AI-Driven Supply Chain Malware Targeting IT and OSINT Professionals
SOC Prime Bias: Critical
Morphisec
CyberVolk Reemerges: VolkLocker’s New Features and Flaws
SOC Prime Bias: High
SentinelOne
Ransomware Targeting ESXi: Practical Hypervisor Hardening Defenses
SOC Prime Bias: Critical
Huntress
Hunting Malicious LSASS Access in Windows Environments
SOC Prime Bias: Medium
Splunk
CVE-2025-10573: Ivanti EPM Unauthenticated Stored XSS Vulnerability (Patched)
SOC Prime Bias: Critical
Rapid7
Makop Ransomware Attacks on Indian Businesses: GuLoader Delivery and Privilege Escalation
SOC Prime Bias: Critical
Acronis
Castle RAT Client Malware: Tactics, Techniques, and Tradecraft
SOC Prime Bias: Medium
Splunk