Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned
2026-06-18T14:51:51Z•51c491e081048ce563df13d4855eeddbd4f502c07cc9da77ba073c324cb38fbf
AI-offensive-testingAPI-security','42Crunch','GitHub-Copilot','network-change-governAtlas-PreemptBarracudaEDR-bypassFortiBleedFortinetGentleKillerGentlemen-RaaSMDROperation EndgameRobloxSocGholishVPN-gatewayaccount-takeoverautomated-remediationcredentials-leakeSentireemail-securitygame-takeoverlaw-enforcementmalicious-updatesmalwarephishingransomware
What happened
This feed covers multiple high-impact security developments: international law enforcement (Operation Endgame) disrupted the SocGholish malware operation by taking down 106 servers and remediating ~15,000 compromised sites; a FortiBleed data leak exposed configuration files and credentials for ~74,000 Fortinet firewalls/VPN gateways; GentleKiller (linked to the Gentlemen RaaS) maintains EDR-killer tooling that targets 400+ security processes across 48 products to disable protections; malware is being used to seize entire Roblox games and developer revenue; eSentire launched Atlas Preempt for持续
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 51c491e081048ce563df13d4855eeddbd4f502c07cc9da77ba073c324cb38fbf
- Enrichment time
- 2026-06-18T14:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.