Wie erkennen Sie SocGholish fake update scam disrupted: nearly 15000 hacked WordPress sites cleaned?

Kurzfassung

Operation Endgame dismantled the SocGholish (FakeUpdates) framework, which hijacked ~15,000 legitimate WordPress sites to serve convincing fake browser and software update prompts to everyday visitors. Anyone browsing trusted local...

Wie es funktioniert

Warnzeichen

A pop up urging you to "update Chrome / Flash / your browser" while browsing a normal business site
Being redirected to an unfamiliar download page after clicking a link on a trusted site
The update is an .exe or .msi file, not delivered through your normal browser/OS updater. What to do
Never install updates prompted by a website. Update Chrome, Firefox, Edge, and OS only via their built in updaters or official vendor pages
Enable automatic updates for your browser, OS, and plugins; uninstall obsolete components like Flash or Java

Was tun

1Never install updates prompted by a website.

Quelle

malwarebytes

Quelle geprueft vom Mythos Forensic Team

https://www.malwarebytes.com/blog/news/2026/06/nearly-15000-infected-websites-cleaned-in-socgholish-crackdown

FAQ

Ist SocGholish fake update scam disrupted: nearly 15000 hacked WordPress sites cleaned ein reales Betrugsmuster?

Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.

Was sind die ersten Warnzeichen?

A pop up urging you to "update Chrome / Flash / your browser" while browsing a normal business site; Being redirected to an unfamiliar download page after clicking a link on a trusted site; The update is an .exe or .msi file, not delivered through your normal browser/OS updater. What to do

Was sollte ich zuerst tun?

Never install updates prompted by a website.

Kann LegalAudit meinen Fall pruefen?

Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.