Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Tracing a Multi-Vector Malware Campaign: From VBS to Open Infrastructure
SOC Prime Bias: Medium
levelbluecyber
From Invitation to Infection: How SILENTCONNECT Delivers ScreenConnect
SOC Prime Bias: Medium
elastic.co
Winos 4.0 Malware Masquerading as a KakaoTalk Installer
SOC Prime Bias: Medium
ASEC
Phishing Clues Hidden in the /tmp Folder
SOC Prime Bias: Medium
Huntress
ESET Research EDR killers explained: Beyond the drivers
SOC Prime Bias: Critical
welivesecurity.com
From W-2 to BYOVD: How a Tax Search Leads to Kernel-Mode AV/EDR Kill
SOC Prime Bias: Medium
Huntress
GSocket Backdoor Delivered Through Bash Script
SOC Prime Bias: Medium
SANS Internet Storm Center
Fake Homebrew Typosquats Used to Deliver Cuckoo Stealer via ClickFix
SOC Prime Bias: Medium
hunt.io
Tracking Malware Campaigns With Reused Material
SOC Prime Bias: Critical
SANS Internet Storm Center
SmartLoader Clones the Oura Ring MCP to Stage a Supply-Chain Attack
SOC Prime Bias: Critical
straiker.ai
