Russian cybercriminals tied to global fake computer update scam: RCMP

Canadian cybercrime investigators have dismantled a global scam that tricked users into downloading malicious files disguised as legitimate computer updates. The Royal Canadian Mounted Police (RCMP) announced the operation, dubbed "Operation Endgame," which targeted the SocGholish malware.

Linked to the Russian cybercriminal group Evil Corp, SocGholish malware exploited thousands of WordPress sites to gain unauthorized access to computer systems and data. The RCMP collaborated with law enforcement agencies in the Netherlands, the United States, and Germany on this joint action.

Authorities reported taking down 106 servers and domains worldwide, cleaning almost 15,000 websites, and notifying victims. WordPress site owners are urged to change their login credentials and enable multi-factor authentication. The public is advised to avoid trusting suspicious browser pop-ups or urgent update notices to prevent infection.