Hunters Rapid Response incident
CrowdStrike July Outage (C-00000291) - Update
Resolved after 2 days 3 hours, affecting Rapid Response, on July 20, 2024.
Dear Customers, Axon is aware that multiple threat actor groups are exploiting the current chaos and panic within organizations caused by the ongoing Crowdstrike outage incident. Our analysis has identified several ongoing malicious campaigns, including: * Phishing and adware campaigns aimed at fraud and credential theft. * Malware campaigns delivered via email targeting employees and IT personnel. * Fraudulent groups impersonate Crowdstrike in phone calls to IT personnel to install remote tools or steal money. Over the past day, our team has been continuously monitoring and hunting for IOCs based on our intelligence sources. Affected customers will be notified directly. In addition, the IOCs have been added to the Axon IOCs feed, to allow future tracking with the Hunters platform. The appendix to the current IOCs can be found on our RR Github page: https://github.com/axon-git/rapid-response/blob/main/CrowdStrike%20July%20Outage%20(C-00000291)/threat_iocs_cs_outage_breach_200724.txt Please do not hesitate to reach out if you have any questions. Yours, Team Axon
Affected components
Update timeline
- identified Jul 20, 2024, 11:23 AM UTC
Dear Customers, Axon is aware that multiple threat actor groups are exploiting the current chaos and panic within organizations caused by the ongoing Crowdstrike outage incident. Our analysis has identified several ongoing malicious campaigns, including: * Phishing and adware campaigns aimed at fraud and credential theft. * Malware campaigns delivered via email targeting employees and IT personnel. * Fraudulent groups impersonate Crowdstrike in phone calls to IT personnel to install remote tools or steal money. Over the past day, our team has been continuously monitoring and hunting for IOCs based on our intelligence sources. Affected customers will be notified directly. In addition, the IOCs have been added to the Axon IOCs feed, to allow future tracking with the Hunters platform. The appendix to the current IOCs can be found on our RR Github page: https://github.com/axon-git/rapid-response/blob/main/CrowdStrike%20July%20Outage%20(C-00000291)/threat_iocs_cs_outage_breach_200724.txt Please do not hesitate to reach out if you have any questions. Yours, Team Axon
- resolved Jul 22, 2024, 02:35 PM UTC
This incident has been resolved.
Your product runs on more than Hunters Rapid Response
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services