Ransomware & Supply Chain Attacks Proliferate as TridentLocker Hits Gov't Contractor and Cl0p Breaches Korean Air
Summary
This cybersecurity brief for January 6, 2026, covers a surge in high-impact incidents. Key events include a confirmed ransomware attack on a Sedgwick government subsidiary by the new TridentLocker group and a major supply chain breach at Korean Air via a vendor, attributed to Cl0p. Additionally, the Kimwolf botnet has infected over two million Android devices, Microsoft warns of phishing attacks exploiting email routing flaws, and new state-level privacy laws have taken effect across the U.S., increasing compliance burdens.
Today New Articles
Kimwolf Botnet Hijacks 2M Android Devices via Proxy Networks
The Kimwolf botnet has rapidly expanded to infect over 2 million devices worldwide, primarily targeting low-cost Android-based TV and streaming boxes. Active since at least mid-2025, the botnet operators monetize their network by launching large-scale DDoS att...
Russia-Aligned UAC-0184 Uses Viber to Target Ukrainian Military
The Russia-aligned threat group UAC-0184 (also tracked as Hive0156) has evolved its tactics to include the Viber messaging platform for malware distribution. The group is targeting Ukrainian military and government departments with malicious ZIP archives conta...
New Privacy & Cybersecurity Laws Take Effect Across US States
January 1, 2026, marked the effective date for a significant wave of new state-level privacy and cybersecurity laws in the United States. Comprehensive privacy laws are now active in Indiana, Kentucky, and Rhode Island. Concurrently, new regulations under the...
EmEditor Website Hacked to Distribute Infostealer Malware
Emurasoft, the developer of the popular EmEditor text editor, has disclosed that its official website was compromised for a four-day period. During the breach, the main download button on the homepage was redirected to a malicious server hosting a trojanized i...
Article Updates
Korean Air Subsidiary Breach Exposes Data of 30,000 Employees
Update:New reports confirm that the notorious Cl0p ransomware group has claimed responsibility for the supply chain attack on Korean Air's catering supplier, KC&D Service. The group stated they exploited a vulnerability in Oracle E-Business Suite to gain initial acce...