Low-level cybercriminals are pouncing on CrowdStrike-connected outage

Following a faulty CrowdStrike Falcon update that disabled millions of Windows devices, multiple malicious actors capitalized on the outage: phishing lures and CrowdStrike-themed files delivered information stealers (Daolpu, Connecio), HijackLoader-based installers, and at least one wiper claimed by the hacktivist persona “Handala Hack.” Researchers observed thousands of newly registered CrowdStrike-like domains and numerous bogus certificates; vendors and national cybersecurity agencies reported active exploitation and coordinated mitigation efforts.