14,971 WordPress Sites Cleaned in Global SocGholish Takedown
ID: 9586a57c-1de0-5596-94fe-621e4742b864
STIX ID: report--9586a57c-1de0-5596-94fe-621e4742b864
Feed Name: Security Affairs
Threat Score
Operation EndGame, a multinational law-enforcement action coordinated through Europol, disrupted the SocGholish/FakeUpdates ecosystem (attributed to TA569) by taking down 106 servers and remediating 14,971 compromised WordPress sites; the report describes SocGholish’s use of injected obfuscated JavaScript, a Keitaro-like TDS operated by TA2726, blob-based cross-frame downloads (GhoLoader/MintsLoader), links to major ransomware families and RATs, and recommended WordPress remediation steps.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.