Just hours after the CrowdStrike update became widely reported, cyber criminals spun quick into action and have been sending out Phishing emails related to the outage. The emails may seem to come from “CrowdStrike Support” or “CrowdStrike Security” but further investigation of the actual email address shows fake domains and not that of CrowdStrike.
Some of the emails are prompting users to click on an attachment labelled as a “patch” to fix the problem. These are just malware scripts which can lead to even more serious damage such as ransomware.
Other emails have links to fake websites which claim to have the instructions to fix the problem, and some even request a payment to get the fix. It should be noted that the fix has been widely reported and is available for free from CrowdStrike.
Anyone in receipt of an email indicating you need to take action to fix and or prevent any problems owing to the CrowdStrike issue should not engage in the email and first contact their IT personnel to see if that is indeed a legitimate email. It most likely will not be so do not click on any links or download any attachments.
0