Summary On July 23, 2024, CrowdStrike Intelligence identified the phishing domain crowdstrike-office365[.]com, which impersonates CrowdStrike and delivers malicious ZIP and RAR files containing a Microsoft Installer (MSI) loader. The loader ultimately executes Lumma Stealer packed with CypherIt. The domain was registered on July 23, 2024, days after July 19, 2024, when an issue … [Read more...] about Malware Distributed Using Falcon Sensor Update Phishing Lure
Falcon
Malicious Inauthentic Falcon Crash Reporter Installer Distributed to German Entity
Summary On July 24, 2024, CrowdStrike Intelligence identified an unattributed spearphishing attempt delivering an inauthentic CrowdStrike Crash Reporter installer via a website impersonating a German entity. The website was registered with a sub-domain registrar. Website artifacts indicate the domain was likely created on July 20, 2024, one day after an issue present in a … [Read more...] about Malicious Inauthentic Falcon Crash Reporter Installer Distributed to German Entity
Harnessing Email Data to Stop Phishing Attacks with Falcon Next-Gen SIEM
Phishing is a formidable–and financially devastating–threat costing organizations $4.76 million USD per breach on average. With a simple, deceptive email, adversaries can masquerade as trusted entities, tricking even savvy individuals into handing over their credentials and other sensitive information. Whether it’s a duplicitous link or a crafty call to action, phishing … [Read more...] about Harnessing Email Data to Stop Phishing Attacks with Falcon Next-Gen SIEM
Falcon NG-SIEM Data Onboarding: Demo Drill Down
June 24, 2024|Ted Pan |Tech Hub•Next-Gen SIEM Tweet Share Related Content Harnessing Email Data to Stop Phishing Attacks with Falcon Next-Gen SIEM NG-SIEM – AI Assisted Investigation NG-SIEM – Adversary Driven Detection 3 Crucial Capabilities for Effective Cloud Detection and Response Copyright © … [Read more...] about Falcon NG-SIEM Data Onboarding: Demo Drill Down
Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security
We’re thrilled to share that the CrowdStrike Falcon® sensor now fully supports Google Cloud Run, bringing advanced security capabilities to your serverless applications. While we announced this at Google Cloud Next in April 2024, this blog goes deeper into the integration and shares how customers leveraging Google Cloud Run and CrowdStrike can deploy Falcon quickly to enhance … [Read more...] about Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security
Falcon Fusion SOAR and Machine Learning-based Detections Automate Data Protection Workflows
Time is of the essence when it comes to protecting your data, and often, teams are sifting through hundreds or thousands of alerts to try to pinpoint truly malicious user behavior. Manual triage and response takes up valuable resources, so machine learning can help busy teams prioritize what to tackle first and determine what warrants further investigation. The new Detections … [Read more...] about Falcon Fusion SOAR and Machine Learning-based Detections Automate Data Protection Workflows
Falcon Fund Invests in Nagomi
Preventable breaches are a common problem. According to research by Nagomi, a leader in the nascent field of automated security control assessment, 80% of breached organizations already had a tool in place that could have prevented it. One solution is to maximize the use of security tools they already have. Many enterprises grapple with ineffective and reactive security … [Read more...] about Falcon Fund Invests in Nagomi
CrowdStrike Falcon Wins Best EDR Annual Security Award in SE Labs
CrowdStrike wins third consecutive Best Endpoint Detection and Response 2024 Award from SE Labs The award recognizes that the CrowdStrike Falcon® platform demonstrates consistent results in detecting real-world adversary tradecraft, both in SE Labs testing and in real-world scenarios CrowdStrike remains committed to participating in independent testing that provides … [Read more...] about CrowdStrike Falcon Wins Best EDR Annual Security Award in SE Labs
Secure More GCP Workloads with GKE Autopilot Supported by Falcon Cloud Security
In the ever-evolving landscape of cloud security, staying ahead of the curve is paramount. Today, we are announcing an exciting enhancement: CrowdStrike Falcon® Cloud Security now supports Google Kubernetes Engine (GKE) Autopilot. This integration marks an important milestone in our commitment to providing cutting-edge DevSecOps-focused security and solutions for modern cloud … [Read more...] about Secure More GCP Workloads with GKE Autopilot Supported by Falcon Cloud Security
Eliminate Repetitive Tasks and Accelerate Response with Falcon Fusion
Adversaries are becoming more sophisticated and faster with their attacks. According to the CrowdStrike 2023 Threat Hunting Report, the average eCrime breakout time is just 79 minutes. This is partly due to adversaries taking advantage of tools that leverage automation like password-cracking tools, exploit kits for web browser vulnerabilities, and marketplaces that sell stolen … [Read more...] about Eliminate Repetitive Tasks and Accelerate Response with Falcon Fusion