Law enforcement disrupts SocGholish botnet by cleaning 15,000+ WordPress sites
Source headline: Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
Intelligence Summary
International law enforcement cleaned almost 15,000 malware-infected WordPress sites tied to the SocGholish botnet. Agencies also took down more than 100 servers associated with the same operation. The infrastructure is linked to the Evil Corp Russian cybercrime group. SocGholish infections typically rely on compromised websites to support malicious activity and botnet control. Site owners should review for WordPress compromise indicators and ensure timely hardening and patching to prevent reinfection.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.