Meet CrowdStrike’s Adversary of the Month for February: MUMMY SPIDER
Enter to win a stunning CrowdStrike 2018 Adversary Calendar featuring MUMMY SPIDER and more. In continuance of our monthly blog post to introduce…
Research & Threat Intel
Meet CrowdStrike’s Adversary of the Month for January: VOODOO BEAR
For the past several years, CrowdStrike® has published a yearly calendar that includes international holidays, working days of the most prevalent threat…
Malicious Spear-Phishing Campaign Targets Upcoming Winter Olympics in South Korea
A malicious campaign has been identified targeting suspected victims involved in or supporting the February 2018 Olympic Winter Games in Pyeongchang, South…
An End to “Smash-and-Grab” and a Move to More Targeted Approaches
In late October and early November, 2017, CrowdStrike® Falcon Intelligence™ observed People’s Republic of China (PRC)-based actors conducting espionage-driven targeted attacks against…
Full Decryption of Systems Encrypted by Petya/NotPetya
As demonstrated in the previous blog post about decryption of Petya/NotPetya, almost the complete Master File Table (MFT) can be decrypted. In…
Software Supply Chain Attacks on the Rise, Undermining Customer Trust
On June 27, 2017, a destructive payload dubbed “NotPetya” by researchers, was deployed covertly using a legitimate software package employed by organizations…
Protecting the Software Supply Chain: Deep Insights into the CCleaner Backdoor
The term “supply chain attacks” means different things to different people. To the general business community, it refers to attacks targeting vulnerable…
Decrypting NotPetya/Petya: Tools for Recovering Your MFT After an Attack
Making the world a better place has always been a core goal of CrowdStrike. In this blog post, we are making our…
CrowdStrike Protects Against NotPetya Attack
Update: Due to naming convention consistency in the industry, CrowdStrike is now calling this variant of Petya - NotPetya. On June 27…
Falcon Intelligence Report: Wanna Ransomware Spreads Rapidly; CrowdStrike Falcon Prevents the Attack
Wanna Decryption Ransom Screen Wanna (also known as WannaCry, WCry, WanaCrypt and WanaCrypt0r) ransomware exploded onto the ransomware scene on May 12,…