Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang

International law enforcement disrupted the SocGholish malvertising botnet that had compromised ~15,000 WordPress sites to push fake software‑update popups which installed malware; 106 associated servers and domains were taken down and site owners were advised to change credentials, enable MFA, remove unknown accounts, and apply updates. The botnet had been used to deliver malware and ransomware, including activity linked to the Evil Corp ransomware group.