Police raid malware network tied to Russia's Evil Corp hacker group

International law-enforcement agencies disrupted the SocGholish botnet, which has been linked to the Russia-based cybercrime group Evil Corp. SocGholish is a browser-based malvertising/drive-by infection framework historically used to deliver loaders and follow-on payloads (including ransomware and other loaders used by criminal groups). The takedown disrupts active infrastructure but does not eliminate the threat—Evil Corp affiliates and other operators can pivot to alternative initial-access vectors or rebuild infrastructure. Organizations should treat this as a temporary reduction in risk,増