Phishing Alert: Cyber Attack on Post-Outage CrowdStrike Users

A recent advisory from India's cyber security agency warns of a phishing attack targeting users impacted by the global computer outage due to a faulty CrowdStrike update. The attackers impersonate CrowdStrike support and distribute malware, potentially causing data leaks and system crashes.

The Indian cyber security agency has issued a warning about a phishing attack targeting users affected by the recent global computer outage. The attackers are posing as CrowdStrike support staff and offering fake system recovery tools. These malicious campaigns could lead to sensitive data leaks, system crashes, and other security breaches, the agency warned.

The worldwide outage on July 19 occurred due to a faulty update to the CrowdStrike Falcon Sensor software, impacting Microsoft Windows operating systems. The outage disrupted numerous services including flight operations, business transactions, and hospital systems.

While official fixes have been released by CrowdStrike and Microsoft, reports indicate ongoing phishing campaigns exploiting the situation. Attackers are deceiving users through phishing emails and phone calls, distributing Trojan malware disguised as recovery tools. The agency advised users to follow cybersecurity best practices to protect against these threats.

(With inputs from agencies.)