Castanet
Russian-linked Threat Actors Deploy SocGholish Malware via Fake Browser Updates
First seen 26 Nov 2025, 19:33 UTC
•



+6
•30.6
Export
Article Content
Browse articles
Cybersecurity researchers at Arctic Wolf Labs have identified a cyberattack campaign utilizing fake browser update notifications to distribute SocGholish malware. This campaign is linked to Russian threat actors and targets unsuspecting users, potentially compromising their systems.
Ask AI about this cluster
Answers cite the sources they use
Analyzing cluster data...
Referenced clusters
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
GRU Compromises Home Routers in 23 States to Steal Outlook Credentials
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
Russia's Hybrid Warfare Threatens UK with Cyberattacks and Sabotage