Police raid malware network tied to Russia's Evil Corp hacker group

International law enforcement conducted a coordinated operation that disrupted the SocGholish malvertising/botnet infrastructure tied to the Russia-based cybercrime group Evil Corp. The takedown targeted servers and affiliate infrastructure used to deliver fake-update/browser-in-the-browser installers and other payloads that have been used to stage ransomware and follow-on intrusions. While the action should reduce current malvertising campaigns, Evil Corp-linked actors remain a high-impact, resilient threat and may reconstitute infrastructure or shift delivery methods.