09/08/2026
Fake update pop-ups taken down
Police have taken down one of the most common ways small businesses get infected: fake "your browser is out of date" pop-ups.
In June 2026, police from several countries shut down a malware network called SocGholish, also known as FakeUpdates. They seized around 106 servers and cleaned up roughly 15,000 hacked websites that were spreading it.
Criminals hacked legitimate websites, often small business sites running WordPress. When someone visited, a pop-up appeared saying their browser was out of date and needed an update. Click it, and instead of an update you downloaded malware, which could lead to ransomware.
The takedown is good news, but the trick isn't going away, because someone always fills the gap. Know this: a real update never comes from a pop-up on a website. Your browser updates itself, and you get other software updates from the program itself or your IT provider. If a website tells you to update something, close the tab.
https://www.helpnetsecurity.com/2026/06/18/law-enforcement-socgholish
operation-endgame/
SocGholish, an operation that's been delivering malware to users via fake software updates, has suffered a major blow.