SocGholish to RansomHub: The Fake-Update Drive-By

A logistics planner browsing an industry site accepted a fake browser-update prompt, and a quiet endpoint script alert turned into credential theft by midday. Follow the chain from a compromised-site injection through a SocGholish JavaScript loader and its command-and-control beacon to a forced-authentication credential harvest and an SMB brute force against a service account.