Nearly 15,000 infected websites cleaned in SocGholish crackdown

International law enforcement (Operation Endgame) disrupted the SocGholish/FakeUpdates malware operation—linked to Evil Corp—by taking down 106 servers/domains and cleaning 14,971 infected WordPress sites that were redirecting visitors to fake update prompts which installed backdoors commonly used to deploy ransomware; investigators also discovered exposed credentials for ~1.4 million WordPress sites and removed malware/backdoors while notifying affected owners.