Cybersecurity incident — 2022-11-02 00:00:00
Affected organization: Undisclosed media company
Affected country: United States of America
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: TA569
Actor type: Criminal
Actor country: Undetermined

Researchers from Proofpoint reveal that threat actors are using the compromised infrastructure of an undisclosed media company to deploy the SocGholish JavaScript malware framework (also known as FakeUpdates) on the websites of hundreds of newspapers across the U.S.