Authorities Dismantle SocGholish Malware Network — 106 Servers and 101 Domains Seized

Operation Endgame—an international law-enforcement effort involving the NHTCU, RCMP, FBI, BKA, Europol and Eurojust—disrupted the long-running SocGholish (FakeUpdates) malware framework by seizing 106 servers, 101 domains and remediating roughly 14,971 infected WordPress sites; SocGholish uses injected malicious JavaScript to present fake browser update prompts that install backdoors and payloads (RATs, infostealers, Cobalt Strike, ransomware) and has been linked to the Evil Corp criminal group.