CrowdStrike Update (Phishing Attempts)

Attention Constituents: 

Since CrowdStrike deployed its international Falcon sensor fix last Friday, 19 July 2024, Crowd Strike Intelligence has identified that threat actors are leveraging this event for malicious purposes such as:

• Distributing a malicious zip file named “crowdstirke-hotfix.zip”;
• Establishing fraudulent domains to mimic CrowdStrike;
• Sending phishing emails posing as CrowdStrike support to customers;
• Impersonating CrowdStrike staff in phone calls; and
• Claiming to have evidence that the technical issue is linked to a cyberattack and offering remediation insights.

For more information on this topic, please see the following links:

• Malicious Zip File IOCs
• Malicious Domains

Best,