Operation Endgame Disrupts SocGholish Malware Infrastructure

Operation Endgame—a coordinated international law enforcement effort—disrupted TA569’s SocGholish infrastructure by seizing over 100 C2 servers and remediating 14,971 compromised websites. The report describes SocGholish’s web-injection delivery chain (site profiling, traffic distribution systems, fake-update prompts) that drops GhoLoader and establishes persistence on CMS platforms, and notes the broader impact on ransomware and botnet ecosystems.