Nearly 15,000 infected websites cleaned in SocGholish crackdown

Operation Endgame disrupted the SocGholish (FakeUpdates) malware ecosystem by taking down 106 servers/domains, cleaning 14,971 infected WordPress sites, and uncovering exposed credentials for roughly 1.4 million WordPress sites; the campaign, linked to Evil Corp, used compromised websites to push fake updates that installed backdoors often used to deploy ransomware. Authorities removed malware/backdoors, notified site owners, and recommended updating WordPress, enabling MFA, and changing passwords.