Infoblox Backs Operation Endgame Takedown of SocGholish Malware Infrastructure

Infoblox announced its support for Operation Endgame, an international law‑enforcement effort that dismantled the infrastructure behind the SocGholish (FakeUpdates) malware campaign. The coordinated action resulted in the remediation of nearly 15,000 compromised websites and the removal of more than 100 servers and domains used to distribute malicious JavaScript that mimics browser updates.

Infoblox said roughly 55 % of its cloud‑security customers encountered SocGholish‑related activity in 2026, highlighting the threat’s reach across public‑sector, enterprise, healthcare, education and critical‑infrastructure networks. The company warned that cyber‑criminal groups can quickly rebuild after takedowns, urging organisations to strengthen DNS‑layer security, employ threat‑intelligence‑driven defenses and maintain robust user‑awareness programmes. Infoblox stressed that continued collaboration among law‑enforcement agencies, security researchers and industry partners is essential to disrupt large‑scale malware ecosystems.