Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
ESET Research GopherWhisper: A burrow full of malware
SOC Prime Bias: Critical
welivesecurity.com
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting
SOC Prime Bias: Critical
The DFIR Report
UNC6692 Deploys Custom Malware Through Social Engineering
SOC Prime Bias: Critical
Google Cloud Blog
Analyzing a full ClickFix attack chain (part 1)
SOC Prime Bias: Medium
Stormshield
Fake Interview Lures Used by Void Dokkaebi to Spread Malware Through Git Repositories
SOC Prime Bias: Critical
Trend Micro
Fake Trading Website Installs Malware That Hijacks Browsers
SOC Prime Bias: Medium
Malwarebytes
Same packet, different magic: Mustang Panda hits India’s banking sector and Korea geopolitics
SOC Prime Bias: Critical
Acronis
Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained
SOC Prime Bias: High
Rapid7
macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections
SOC Prime Bias: Medium
Netskope
Nightmare-Eclipse Moves from Public PoC to Real-World Attacks
SOC Prime Bias: Critical
Huntress
