Active Threats
Explore the latest active threats being deployed by malicious actors as of Q4 2025. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Malware à la Mode: Inside Dropping Elephant’s Loader Chain
SOC Prime Bias: Critical
Rapid7
Showboat Malware Targets Middle East Telecom Firms Since 2022
SOC Prime Bias: High
picussecurity.com
ErrTraffic: Inside a Growing ClickFix Malware Distribution Framework
SOC Prime Bias: High
Sekoia.io Blog
Akira, LimeWire, and the Sour Taste of Data Exfiltration
SOC Prime Bias: High
Huntress
What Was Really Inside the Shortcut File Disguised as a Privacy Consent Form?
SOC Prime Bias: High
ASEC
ESET Research FishMonger’s arsenal upgraded: SprySOCKS for Windows
SOC Prime Bias: Critical
welivesecurity.com
SloppyLemming Attack Techniques & BurrowShell Backdoor Explained
SOC Prime Bias: Critical
picussecurity.com
Inside a Deno-Based Proxy and RAT
SOC Prime Bias: High
InfoGuard Labs
Operation Poisson: Breaking Down an Entire Cybercriminal Operation
SOC Prime Bias: High
Cato Networks
How a VHDX File Delivers Remcos RAT
SOC Prime Bias: High
SANS Internet Storm Center