One-two punch delivered in global operation disrupts cybercrime 'assembly line'

Law enforcement from the Netherlands, Canada, United States, and Germany disrupted TA569 (SocGholish) operations on June 18, 2026, taking down over 100 servers and domains worldwide and remediating 14,971 compromised websites. TA569 is one of the most prominent cybercrime operations that distributes malware through compromised websites. The disruption is expected to significantly impact TA569 operations through service disruptions, malware delivery interruption, and financial losses.

Source: Ars Technica | 2026-06-24