SocGholish

Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware

• Cybercriminals

Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware

Do Son June 25, 2026 0

Operation Endgame disrupts the SocGholish malware network, seizing EUR 41M in crypto and 326 servers. WordPress site owners must act now.

GRU Unit 29155 Uses SocGholish to Target US Firm

• Cyber Security
• Malware

GRU Unit 29155 Uses SocGholish to Target US Firm

Do Son November 26, 2025 0

Arctic Wolf Labs reveals Russian GRU Unit 29155 using SocGholish to deploy RomCom malware against a US firm with ties to Ukraine.

The SocGholish Malware Economy: Stealthy “Fake Updates” Fuel a Global Cybercrime Ecosystem

• Malware

The SocGholish Malware Economy: Stealthy “Fake Updates” Fuel a Global Cybercrime Ecosystem

Do Son August 8, 2025 0

Silent Push exposes SocGholish as a MaaS platform for Initial Access Brokers. The malware, disguised as fake updates, fuels top-tier Russian ransomware groups like Evil Corp.

SocGholish and RansomHub: Sophisticated Attack Campaign Targeting Corporate Networks

• Cybercriminals
• Malware

SocGholish and RansomHub: Sophisticated Attack Campaign Targeting Corporate Networks

Do Son April 28, 2025 0

eSentire TRU discovers a campaign combining SocGholish malware with RansomHub affiliates, using fake updates and Python backdoors to compromise networks.

Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool

• Cyber Security

Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool

Do Son March 27, 2025 0

Explore the evolution of Copy Shop Worm into a sophisticated threat linked to cybercriminals and state-sponsored actors.

SocGholish Malware Facilitates RansomHub Distribution

• Malware

SocGholish Malware Facilitates RansomHub Distribution

Do Son March 17, 2025 0

Explore the SocGholish MaaS framework and its role in malware distribution. Learn about its techniques and impact on cybersecurity.

TA2726 & TA2727: Hackers Deploy Fake Updates to Spread Malware

• Cyber Security
• Malware

TA2726 & TA2727: Hackers Deploy Fake Updates to Spread Malware

Do Son February 20, 2025 0

Explore the activities of TA2726 and TA2727 as they utilize fake browser updates to spread malware and deceive users.

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns

• Cyber Security
• Malware

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns

Do Son February 4, 2025 0

Uncover the TAG-124 traffic distribution system used by cybercriminals to spread malware, phishing pages, and fake browser updates.

10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware

• Malware

10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware

Do Son February 3, 2025 0

Learn about a sophisticated attack campaign targeting WordPress websites and delivering SocGholish Windows malware to unsuspecting users.

Fake Browser Updates Lead to Malicious BOINC Installations

• Cyber Security
• Malware

Fake Browser Updates Lead to Malicious BOINC Installations

Do Son July 21, 2024 0

Huntress has recently uncovered a new wave of malicious activities involving the well-known SocGholish or FakeUpdates malware.

SocGholish Campaign Targets Business Networks via Fake Browser Updates

• Malware

SocGholish Campaign Targets Business Networks via Fake Browser Updates

Do Son May 8, 2024 0

eSentire's Threat Response Unit (TRU) has detailed a sophisticated intrusion campaign by the SocGholish cyber threat group