SocGholish - Fake Browser Update Dropper (T1036.005)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•4•0•9

Identifies the browser process saving a .zip file whose name explicitly spoofs an application update, matching the SocGholish social engineering lure.