Active Threats
Explore the latest active threats being deployed by malicious actors as of 2026. Each report may offer attack flows, actionable detection rules, and simulation instructions to help SOC teams stay ahead of evolving adversary techniques.
Evooo1Bot Linux Botnet: Capabilities and Attack Techniques
SOC Prime Bias: Critical
Fortinet Blog
China-Nexus Actor Uses VHD Files to Target Myanmar Diplomats
SOC Prime Bias: High
Seqrite Labs
Mandatory User Profile Persistence
SOC Prime Bias: Medium
Purple Team
Gunra Ransomware: SafeBreach Coverage for CISA Alert AA26-222A
SOC Prime Bias: Critical
SafeBreach
Akira Hits Safe Mode: Ransomware Rebooting Around EDR
SOC Prime Bias: High
Huntress
SpaceX1337 ClickFix Leads to Hands-on-Keyboard AD Compromise
SOC Prime Bias: Critical
Deception.Pro Blog
ShieldBreak Zero-Day Targets Windows Defender
SOC Prime Bias: Critical
GitHub
CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 Credentials
SOC Prime Bias: Critical
zscaler.com
Abyssos: Technical Analysis of a New Modular RAT
SOC Prime Bias: High
zscaler.com
AmnesiaStealer Hijacks Chromium Browsers on macOS
SOC Prime Bias: High
jamfsoftware
