CrowdStrike Outage: Script, Phishing, and Social Engineering Attacks

**Executive Summary:** On July 19, 2024 a CrowdStrike Falcon update caused widespread Windows BSODs, and adversaries rapidly exploited the outage by distributing malicious recovery files (including a ZIP deploying Remcos RAT and macro-enabled Word docs) and registering impersonating domains to conduct phishing and malware delivery; the report provides IoCs (hashes, an IP, many domains), remediation guidance from Microsoft and CrowdStrike, and recommendations to verify official sources, avoid running untrusted scripts, and educate users against social engineering.