15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown

Operation Endgame disrupted the SocGholish (aka FakeUpdates) distribution network by seizing 106 command-and-control servers and domains and enabling cleanup of approximately 15,000 compromised WordPress sites; the report details SocGholish's JavaScript-based fake-update injection vector, its use to deliver RATs, Cobalt Strike beacons and ransomware loaders, association with Evil Corp, and recommended remediation steps for site owners.