LAW ENFORCEMENT TAKES DOWN 15,000 SOCGHOLISH-INFECTED SITES
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
International police agencies have dismantled nearly 15,000 WordPress websites infected with SocGholish malware and shut down over 100 servers connected to Evil Corp, a Russian cybercrime group.
■ MORE FROM THE SECURITY DESK
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.
Two security researchers purchased commonly-used generic email domains and discovered hundreds of companies automatically sending sensitive corporate data to their listening services. The experiment reveals a widespread failure in email configuration practices across organizations.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.