CrowdStrike outage exploited for Lumma infostealer deployment
Intrusions involved the use of the domain, crowdstrike-office365[.]com, to lure users into downloading a recovery tool purportedly addressing update-related boot loop issues but delivers a malware loader.
Financially motivated attacks part of Andariel expansion
Attacks against defense and government organizations worldwide have enabled APT45 to steal information regarding missiles and missile defense systems, nuclear power plants, radar systems, fighter aircraft and unmanned aerial vehicles, and satellites...
US indicts, places bounty on Andariel hacker amid joint advisory on threat group
Ransoms extorted by Rim and his co-conspirators from healthcare providers across the U.S. have been leveraged to support additional attacks against the country's government organizations and foreign defense contractors.
CrowdStrike 'Updates' Deliver Malware & More as Attacks Snowball
The fake updates are part of a phishing and fraud surge that is both more voluminous and more targeted that the usual activity around national news stories.