SIGNALInfrastructure Software·Jun 18, 2026, 1:25 PMSignal75Short term

Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

Source: BleepingComputer

Share
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group. [...]

Why this matters
Why now

The coordinated international law enforcement action against SocGholish and Evil Corp highlights ongoing efforts to combat sophisticated cybercrime, a persistent and evolving threat.

Why it’s important

This action demonstrates the increasing effectiveness of international cooperation in disrupting major cybercriminal operations, affecting the economics of cybercrime and the security of digital infrastructure.

What changes

The disruption of nearly 15,000 infected websites and over 100 servers significantly degrades the operational capacity of a major cybercriminal group, momentarily reducing their attack surface and revenue generation.

Winners
  • · International law enforcement
  • · Website owners (WordPress)
  • · Cybersecurity firms
Losers
  • · Evil Corp
  • · SocGholish botnet operators
  • · Cybercriminals
Second-order effects
Direct

The immediate impact is a reduction in WordPress-based malware infections and a temporary decrease in Evil Corp's illicit activities.

Second

This disruption may force cybercriminal groups to invest more in stealth and resilience, potentially leading to new attack methodologies or infrastructure diversification.

Third

It could encourage greater public-private collaboration in threat intelligence and response, improving overall digital security posture against persistent adversaries.

Editorial confidence: 95 / 100 · Structural impact: 60 / 100
Original report

This signal links to a primary source. Continuum Brief monitors and indexes it as part of the live intelligence stream — we do not republish source content.

Read at BleepingComputer
Tracked by The Continuum Brief · live intelligence network
Share
The Brief · Weekly Dispatch

Stay ahead of the systems reshaping markets.

By subscribing, you agree to receive updates from THE CONTINUUM BRIEF. You can unsubscribe at any time.