Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
CaptiveCrunch Campaign Delivers Malware and Steals Traveler Credentials
SOC Prime Bias: Critical
Microsoft Security Blog
ClickFix, EtherHiding, and the DPRK Cryptocurrency Trail
SOC Prime Bias: Critical
AllSecure
AtlasRAT Loader Chain Reveals a Multi-Stage Infection Process
SOC Prime Bias: High
ASEC
Operation AkaiRyū Uses Expo 2025 Lures to Deliver ANEL
SOC Prime Bias: Critical
welivesecurity.com
Malicious Interview Software Delivers Info-Stealing Malware
SOC Prime Bias: High
Medium
Astaroth Malware Abuses Ngrok and Steganography for C2
SOC Prime Bias: High
picussecurity.com
BlueShell Malware Variant Linked to APT Campaigns
SOC Prime Bias: High
IIJ Security Diary
Astaroth Adds a New Spambot Component for Email Campaigns
SOC Prime Bias: High
crowdstrike.com
DEV#POPPER RAT Delivered Through Compromised Joyfill npm Releases
SOC Prime Bias: Critical
Socket
Azure VM Command Execution via a Third-Party Salt Minion Extension
SOC Prime Bias: High
NetSPI
