Phishing Campaigns Continue To Exploit CrowdStrike Outage

Threat actors are exploiting a global CrowdStrike content-update outage by registering impersonating domains, sending phishing emails and calls claiming to be CrowdStrike support, and distributing a malicious file named "crowdstrike-hotfix.zip" that installs the RemCos RAT; CISA, NCSC, ASD and security vendors have issued warnings and observed Spanish-language targeting in Latin America and other opportunistic scams tied to the outage.