Threat Group: TA569 (SocGholish operators)
Threat Type: Malware Delivery via Fake Update Alerts
Exploited Vulnerabilities: Compromised websites with JavaScript injection
Malware Used: SocGholish (FakeUpdate), NetSupport RAT, Raspberry Robin Worm
Threat Score: High (8.5/10) — Effective social engineering with broad targeting and advanced persistence techniques
Last Threat Observation: October 2024