CrowdStrike 'Updates' Deliver Malware & More as Attacks Snowball

Following a CrowdStrike outage, cybercriminals rapidly launched targeted phishing and typosquatting campaigns against affected customers — registering thousands of spoof domains and distributing malicious artifacts (including a ZIP containing HijackLoader that loaded the RemCos RAT and a separate wiper claimed by the hacktivist group Handala). Attacks are more targeted and higher-volume than typical news-driven scams, leveraging fake hotfixes, malicious attachments, and support impersonation to regain access or destroy data; defenders are advised to use blocklists, protective DNS, and only rely on official CrowdStrike support channels.