SocGholish Deploying a Python-based Backdoor Linked to RansomHub Affiliate

Apr 30, 2025 · 4 min read · Summary eSentire discovered a cyberattack involving SocGholish (also known as FakeUpdates) malware, which was used to gather system information and deliver a zip archive containing a Python-based backdoor linked to RansomHub affiliates. Emerging in 2...