Search: “SocGholish”

39 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 55 Ransomware 39 Threat actor 7 Exploit / PoC 5 Vulnerability 3 Phishing & fraud 1

SeverityAll critical 35 high 58 medium 16 low 0 info 1

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites

The Hacker NewsJun 19, 17:13 UTC · Jun 19, 2026Ransomware

60

14,971 WordPress Sites Cleaned in Global SocGholish Takedown

Security AffairsJun 19, 13:41 UTC · Jun 19, 2026Ransomware

60

Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned

Help Net SecurityJun 18, 00:00 UTC · Jun 18, 2026Ransomware

57

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

The Hacker NewsAug 8, 04:01 UTC · Aug 8, 2025Ransomware CVE-2024-38196

60

For the first time, a RomCom payload has been observed being distributed via SocGholish.

Security AffairsNov 26, 20:16 UTC · Nov 26, 2025Ransomware

57

Operation Endgame Disrupts Network Linked to Major Ransomware Gang

Infosecurity MagazineJun 19, 10:15 UTC · Jun 19, 2026Ransomware

60

Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement

The RecordJun 24, 20:21 UTC · Jun 24, 2026Ransomware

60

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025Ransomware CVE-2024-4984 CVE-2024-36651

60

Multi-Layered TDS Infrastructure Linked to Major Cyber Threats

Recorded FutureSep 5, 00:00 UTC · Sep 5, 2024Ransomware

57

At least 31 US Businesses targeted with WastedLocker Ransomware

Security AffairsJun 29, 19:26 UTC · Jun 29, 2020Ransomware

57

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

The Hacker NewsMar 26, 04:30 UTC · Mar 26, 2025Ransomware

57

Cloud Account Attacks Surged 16

Infosecurity MagazineMar 13, 14:01 UTC · Mar 13, 2024Ransomware

60

Cyber threats organizations should keep an eye on in 2023

Help Net SecurityApr 5, 00:00 UTC · Apr 5, 2023Ransomware

60

Experts Shed Light On Distinctive Tactics Used by Hades Ransomware

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2021Ransomware

57

Ransomware gangs don't need control system access to disrupt industrial production

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2026Ransomware

57

Security Affairs newsletter Round 583 by Pierluigi Paganini – INTERNATIONAL EDITION

Security AffairsJul 4, 23:02 UTC · Jul 4, 2026Ransomware CVE-2026-47729 CVE-2026-20971 CVE-2026-20245+1 CVEs

60

Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Ransomware

57

Security Affairs newsletter Round 552 by Pierluigi Paganini

Security AffairsNov 30, 15:30 UTC · Nov 30, 2025Ransomware CVE-2025-59287

60

RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control

The Hacker NewsMay 1, 10:52 UTC · May 1, 2025Ransomware

60

VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi

The Hacker NewsMar 25, 03:08 UTC · Mar 25, 2025Ransomware CVE-2024-55591 CVE-2025-24472

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]

The Hacker NewsJan 20, 12:04 UTC · Jan 20, 2025Ransomware CVE-2025-21333 CVE-2025-21334 CVE-2025-21335+36 CVEs1

60

Ransomhub ransomware gang claims the hack of Mexican government Legal Affairs Office

Security AffairsNov 21, 21:06 UTC · Nov 21, 2024Ransomware

60

Talos IR trends Q3 2024: Identity

Cisco TalosOct 24, 10:00 UTC · Oct 24, 2024Ransomware CVE-2024-37085

60

RansomHub ransomware gang relies on TDSKiller to disable EDR

Security AffairsSep 11, 13:15 UTC · Sep 11, 2024Ransomware

60

A group linked to RansomHub operation employs EDR

Security AffairsAug 15, 20:12 UTC · Aug 15, 2024Ransomware

57

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

The Hacker NewsAug 1, 12:39 UTC · Aug 1, 2024Ransomware

57

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

The Hacker NewsJul 18, 08:54 UTC · Jul 18, 2024Ransomware

57

Octo Tempest group adds RansomHub and Qilin ransomware to its arsenal

Security AffairsJul 17, 06:33 UTC · Jul 17, 2024Ransomware

57

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute

The Hacker NewsMar 7, 13:45 UTC · Mar 7, 2024Ransomware CVE-2021-4436

60

Malicious logins from suspicious infrastructure fuel identity-based incidents

Help Net SecurityFeb 2, 00:00 UTC · Feb 2, 2024Ransomware

57

Kaspersky crimeware report: FakeSG, Akira and AMOS

Kaspersky SecurelistDec 13, 10:00 UTC · Dec 13, 2023Ransomware

57

CISA and FBI Issue Warning About Rhysida Ransomware Double Extortion Attacks

The Hacker NewsNov 18, 05:57 UTC · Nov 18, 2023Ransomware CVE-2020-1472

60

Law firms under cyberattack

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2023Ransomware

57

RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

The Hacker NewsJul 6, 10:40 UTC · Jul 6, 2023Ransomware

60

VPN and RDP Exploitation the Most Common Attack Technique

Infosecurity MagazineJun 29, 13:00 UTC · Jun 29, 2023Ransomware CVE-2022-229651

60

Raspberry Robin Operators Selling Cybercriminals Access to Thousands of Endpoints

The Hacker NewsOct 28, 13:07 UTC · Oct 28, 2022Ransomware

57

Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers

The Hacker NewsSep 2, 06:09 UTC · Sep 2, 2022Ransomware

57

Evil Corp Cybercrime Group Shifts to LockBit Ransomware to Evade Sanctions

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022Ransomware

57

Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack

The Hacker NewsJul 24, 09:48 UTC · Jul 24, 2020Ransomware

57