Operation Endgame Shuts Down SocGholish, Cleans 15k WP Sites

A recent law enforcement action named Operation Endgame successfully dismantled the SocGholish malware operation, which has been distributing fake software updates since 2017. Authorities cleaned nearly 15,000 infected WordPress sites and took down 106 servers associated with this malware framework, operated by the Russian group Evil Corp. The operation revealed exposed login credentials for approximately 1.4 million WordPress sites, indicating a widespread issue.

Users are advised to check their email credentials for breaches and enhance their security by updating passwords and enabling multi-factor authentication. This intervention disrupts a critical infection chain used by various ransomware groups, effectively reducing potential future victims.