Navigate SocGholish with Huntress | Huntress

Huntress investigated a SocGholish drive-by campaign in which a user downloaded a suspicious Update.js (via a compromised WordPress blog redirect) that loaded heavily obfuscated JavaScript from assay.porchlightcommunity.org; analysis (including deobfuscation and URLScan searches) revealed multiple second-stage domains and over 100 potentially compromised hosts, with the report providing IOCs and recommended tools (SQLite3, URL Revealer) for containment and further investigation.