CrowdStrike

CrowdStrike faced significant disruption after releasing a flawed software update to its Falcon platform, which caused Windows computers to malfunction. The issue caused widespread operational delays and opened the door for opportunistic cybercriminals to launch 'CrowdStrike Support' scams. These threat actors targeted the company's customers and others affected, creating websites and sending phishing emails masquerading as support staff, exacerbating the initial damage and misleading victims during a vulnerable time.

Source: https://www.wired.com/story/crowdstrike-outage-support-scams/

TPRM report: https://scoringcyber.rankiteo.com/company/crowdstrike

"id": "cro000072024",
"linkid": "crowdstrike",
"type": "Cyber Attack",
"date": "7/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Cybersecurity',
                        'name': 'CrowdStrike',
                        'type': 'Company'}],
 'attack_vector': ['Phishing', 'Malicious Websites'],
 'description': 'CrowdStrike faced significant disruption after releasing a '
                'flawed software update to its Falcon platform, which caused '
                'Windows computers to malfunction. The issue caused widespread '
                'operational delays and opened the door for opportunistic '
                "cybercriminals to launch 'CrowdStrike Support' scams. These "
                "threat actors targeted the company's customers and others "
                'affected, creating websites and sending phishing emails '
                'masquerading as support staff, exacerbating the initial '
                'damage and misleading victims during a vulnerable time.',
 'impact': {'operational_impact': ['Widespread Operational Delays'],
            'systems_affected': ['Windows Computers']},
 'motivation': ['Scam', 'Phishing'],
 'threat_actor': 'Opportunistic Cybercriminals',
 'title': 'CrowdStrike Falcon Platform Software Update Disruption',
 'type': 'Software Update Issue and Phishing Campaign',
 'vulnerability_exploited': 'Flawed Software Update'}