As cited
Copy frozen at (site build).
threat intel
SocGholish Takedown Highlights Malicious TDS Threats
SocGholish, a traffic distribution system (TDS), has been taken down after being used to deliver initial network access for cybercrime groups including Evil Corp. Traffic distribution systems like SocGholish route victim traffic to malicious payloads based on device characteristics and other targeting criteria. The takedown highlights the critical role that TDS infrastructure plays in enabling ransomware and other cybercrimes.
Why it matters: Organizations need to understand that TDS-enabled initial access remains a primary vector for ransomware gangs; blocking TDS traffic and monitoring for suspicious redirects can help prevent compromise.
- Source published
- First seen by Cybersecurity Tracker