Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
SOLYXIMMORTAL : PYTHON MALWARE ANALYSIS
SOC Prime Bias: Medium
CYFIRMA
When Malware Authors Troll Security Researchers
SOC Prime Bias: Medium
profero.io
Can You Overuse LOLBins to Deliver RAT Payloads?
SOC Prime Bias: Medium
Malwarebytes
UAT-8837 Targets Critical Infrastructure Across North America
SOC Prime Bias: Critical
Cisco Talos Blog
BigSquatRat npm Package Campaign Analysis
SOC Prime Bias: Critical
kmsec.uk
Operation Nomad Leopard: Targeted Spear-Phishing Campaign Against Government Entities in Afghanistan
SOC Prime Bias: Critical
Seqrite
How Threat Actors Are Weaponizing Microsoft Visual Studio Code
SOC Prime Bias: Critical
jamfsoftware
Dissecting CrashFix: KongTuke’s New Toy
SOC Prime Bias: Critical
Huntress
Operation Covert Access: Weaponized LNK-Based Spear-Phishing Targeting Argentina’s Judicial Sector to Deploy a Covert RAT
SOC Prime Bias: Critical
Seqrite
BlueNoroff Group: The Financial Cybercrime Arm of Lazarus
SOC Prime Bias: Critical
picussecurity.com