Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
LockBit Reborn: Inside the Group’s Post-Takedown Evolution
SOC Prime Bias: High
picussecurity.com
Critical King Addons for Elementor Vulnerability Under Active Exploit
SOC Prime Bias: Critical
Wordfence
UDPGangster Attacks Spread Across Multiple Countries
SOC Prime Bias: Critical
Fortinet Blog
CoinMiner Malware Continues to Spread via USB Drives
SOC Prime Bias: Medium
ASEC
CVE-2025-55182 and CVE-2025-66478: High-Fidelity Detection for RSC/Next.js RCE
SOC Prime Bias: Critical
Searchlight Cyber
APT36 Deploys Python ELF Malware Against Indian Government Entities
SOC Prime Bias: Critical
CYFIRMA
ValleyRAT Malware Targets Job Seekers, Abuses Foxit DLL Sideloading
SOC Prime Bias: Medium
Trend Micro
Riddle Spider Avaddon Ransomware Analysis and Technical Overview
SOC Prime Bias: High
picussecurity.com
Matanbuchus 3.0: Technical Analysis
SOC Prime Bias: High
Analysis of Rhadamanthy
DIRTYBULK and Friends: USB Malware Fuelling Coinmining Ops
SOC Prime Bias: Medium
googlecloudcommunity.com