> TritonInfoSec News
Home / Jun 20, 2026 / Story
0
#2 The Hacker News general June 19, 2026 at 15:07 UTC

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites

By [email protected] (The Hacker News)

AI Summary

Operation Endgame — a joint law enforcement action involving Dutch, Canadian, German, and U.S. authorities — disrupted the SocGholish malware network tied to Russia's Evil Corp, taking down 106 C&C servers and domains while cleaning nearly 14,971 infected WordPress sites. SocGholish is a long-running drive-by download framework used for initial access and ransomware staging. The operation represents one of the more significant botnet disruptions targeting WordPress-based malware infrastructure.

Read full article → https://thehackernews.com/2026/06/operation-endgam…

Relevance score: 89.0/100

# More from June 20

  1. 1
    CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices The Hacker News
  2. 3
    CISA: Splunk Enterprise flaw actively exploited, patch by Sunday BleepingComputer
  3. 4
    Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain The Hacker News
  4. 5
    Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data The Hacker News
  5. 6
    F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution The Hacker News
  6. 7
    Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2 The Hacker News
  7. 8
    The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes The Hacker News
  8. 9
    Texas govt data breach exposes over 3 million driver’s licenses BleepingComputer
  9. 10
    Critical Command Execution Vulnerability Patched in Cisco ISE SecurityWeek