Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
macOS ClickFix Campaign Evolves with Cloaked Infection Gates
SOC Prime Bias: High
Microsoft Security Blog
Xeno Roblox Cheat Lures Deploy a Java-Based Infostealer
SOC Prime Bias: High
Bitdefender Labs
SMOKE#SCREEN Abuses ScreenConnect and Cloudflare Tunnels
SOC Prime Bias: High
Securonix
SmartApeSG Pushes an Unknown RAT Through ClickFix Lures
SOC Prime Bias: High
malware-traffic-analysis.net
Malware Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor
SOC Prime Bias: High
ASEC
NullReceiver Advances EtherHiding with Blank Crypto Transfers
SOC Prime Bias: Critical
6lowecase6
Developers Targeted by Fake AI Tools Delivering Infostealers
SOC Prime Bias: High
Netskope
Atomic macOS Stealer Infection Chain Explained
SOC Prime Bias: High
SANS Internet Storm Center
Nova Ransomware Uses Rust and Layered Defender Evasion
SOC Prime Bias: Critical
AttackIQ
HollowFrame Uses a Layered Loader to Deploy Matryoshka Backdoors
SOC Prime Bias: High
Blackpoint Cyber
