Threat Actors Leverage Fake Update Lures to Deliver SocGholish Malware

SocGholish is a widespread malware delivery framework that compromises legitimate websites to present convincing fake software-update prompts, leading users to download obfuscated JavaScript loaders and secondary payloads; operators use PowerShell evasion techniques, scheduled tasks and Python backdoors for persistence, and the framework has recently been observed delivering Mythic Agent and acting as a gateway for ransomware against organizations.