Windows users need to be careful as cybercriminals are spreading fake CrowdStrike debugging tools.
According to Neowin, on the morning of July 19, a bug update from Microsoft's partner cybersecurity company CrowdStrike caused serious problems for millions of Windows computers worldwide. This error caused computers to continuously reboot and display a "blue screen of death", affecting the operations of many large organizations such as banks, airlines and media companies.
Cybercriminals exploit CrowdStrike incident to spread malicious tools.
The situation became even more serious when cybercriminals quickly took advantage of this chaos to spread a malicious file named "crowdstrike-hotfix.zip". This file contained HijackLoader malware, capable of stealing information and causing serious damage to the system.
Beyond spreading malware, cybercriminals also use sophisticated phishing campaigns. They impersonate CrowdStrike support staff, send phishing emails, and even call customers directly to scam and offer fake solutions.
According to statistics, there have been many domain names created to serve these malicious attack campaigns, including:
- crowdstrike.phpartners.org
- crowdstrike0day.com
- crowdstrikebluescreen.com
- crowdstrike-bsod.com
- crowdstrikeupdate.com
- crowdstrikebsod.com
- www.crowdstrike0day.com
- www.fix-crowdstrike-bsod.com
- crowdstrikeoutage.info
- www.microsoftcrowdstrike.com
- crowdstrikeodayl.com
- crowdstrike.buzz
- www.crowdstriketoken.com
- www.crowdstrikefix.com
- fix-crowdstrike-apocalypse.com
- microsoftcrowdstrike.com
- crowdstrikedoomsday.com
- crowdstrikedown.com
- whatiscrowdstrike.com
- crowdstrike-helpdesk.com
- crowdstrikefix.com
- fix-crowdstrike-bsod.com
- crowdstrikedown.site
- crowdstuck.org
- crowdfalcon-immed-update.com
- crowdstriketoken.com
- crowdstrikeclaim.com
- crowdstrikeblueteam.com
- crowdstrikefix.zip
- crowdstrikereport.com
CrowdStrike and Microsoft have been quick to release troubleshooting tools and advise customers to only contact CrowdStrike's official support channels. However, the situation is still evolving and cybersecurity experts are warning users to be extremely vigilant.
