InfoSecBulletin Cybersecurity for mankind
2025 ends but in the first week of 2026 a handsome figure of victims have been listed a victims of ransomware attack. Nearly about 10 groups are active for the very first week. Quin, play, direwolf, handala are some notable ones.
Accroding to ransomware.live as of 5 january of 2026, 42 organizations are in the queue of victims by 308 ransomware groups. Recent analysis reveals that a few threat groups account for most ransomware attacks, with Qilin being the most active and having the highest number of victims.
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
Qilin is the main threat actor, responsible for around 14 victims, making it the most active group during this time.
Play and Direwolf are secondary threats, each causing about 7 victims, showing less activity compared to Qilin.
Handala has moderate activity, with around 5 victims, making it a mid-tier threat.
DragonForce and Incransom show some activity, with about 3 victims each, indicating they may be engaging in opportunistic or targeted attacks.
LockBit5, Sinobi, and Everest show minimal activity around 1 victim each.
