CrowdStrike Warns of New Phishing Scam Targeting German Customers
As part of a highly focused campaign, CrowdStrike is warning about an unknown threat actor that is trying to take advantage of the Falcon Sensor upgrade controversy by distributing questionable installers to German clients.
The cybersecurity firm reported that on July 24, 2024, it discovered what it called an unattributed spear-phishing attempt that disseminated a fake CrowdStrike Crash Reporter installer through a website pretending to be an unidentified German organization.
On July 20, a day after the malicious update crashed around 9 million Windows devices and caused significant global IT disruptions, the phony website is purported to have been built.
The website uses JavaScript (JS) that poses as JQuery v3.7.1 to download and deobfuscate the installer once the user clicks th...