* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, September 19, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Massive Attack Say They’ll Remove Music From Spotify – yahoo.com

    Massive Attack Announces Plans to Pull Their Music from Spotify

    REO to return for UI homecoming – The News-Gazette

    REO Gears Up to Ignite the Stage at UI Homecoming Celebration!

    Gen V Season 2: What is The Odessa Project? – yahoo.com

    Gen V Season 2: Unlocking the Secrets of The Odessa Project

    PENN Entertainment stock rating reiterated at Market Outperform by JMP – Investing.com

    PENN Entertainment Stock Rated a Market Outperformer by Experts

    Here’s how NJ’s once-vibrant nightclub scene was born and why it died – Bergen Record

    The Rise and Fall of New Jersey’s Once-Vibrant Nightclub Scene: What Happened?

    The Emmys are back: Viewership soars to highest numbers in 4 years – yahoo.com

    The Emmys Return with a Bang: Viewership Hits a 4-Year High

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

    Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

    China says US TikTok deal a ‘win-win’, will review app’s technology and IP transfers – Reuters

    China Hails US TikTok Deal as a ‘Win-Win’ While Launching Review of App’s Technology and IP Transfers

    Bucking the Odds: Why Technology Companies Should Embrace Software Patents Today – Crowell & Moring LLP

    Bucking the Odds: Why Technology Companies Should Embrace Software Patents Today – Crowell & Moring LLP

    City IT presented Best of North Carolina Technology Award – RaleighNC.gov

    City IT Honored with Best of North Carolina Technology Award

    LELO Releases 2025 Futurist Report: Intergenerational Views on Relationships, Sex, and Technology – PR Newswire

    Exploring the Future: How Different Generations View Relationships, Sex, and Technology in 2025

    Will New Big Technology Engagements Reshape Innodata’s Growth Path? – Yahoo Finance

    Could New Major Tech Partnerships Propel Innodata to Unprecedented Growth?

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Massive Attack Say They’ll Remove Music From Spotify – yahoo.com

    Massive Attack Announces Plans to Pull Their Music from Spotify

    REO to return for UI homecoming – The News-Gazette

    REO Gears Up to Ignite the Stage at UI Homecoming Celebration!

    Gen V Season 2: What is The Odessa Project? – yahoo.com

    Gen V Season 2: Unlocking the Secrets of The Odessa Project

    PENN Entertainment stock rating reiterated at Market Outperform by JMP – Investing.com

    PENN Entertainment Stock Rated a Market Outperformer by Experts

    Here’s how NJ’s once-vibrant nightclub scene was born and why it died – Bergen Record

    The Rise and Fall of New Jersey’s Once-Vibrant Nightclub Scene: What Happened?

    The Emmys are back: Viewership soars to highest numbers in 4 years – yahoo.com

    The Emmys Return with a Bang: Viewership Hits a 4-Year High

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

    Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

    China says US TikTok deal a ‘win-win’, will review app’s technology and IP transfers – Reuters

    China Hails US TikTok Deal as a ‘Win-Win’ While Launching Review of App’s Technology and IP Transfers

    Bucking the Odds: Why Technology Companies Should Embrace Software Patents Today – Crowell & Moring LLP

    Bucking the Odds: Why Technology Companies Should Embrace Software Patents Today – Crowell & Moring LLP

    City IT presented Best of North Carolina Technology Award – RaleighNC.gov

    City IT Honored with Best of North Carolina Technology Award

    LELO Releases 2025 Futurist Report: Intergenerational Views on Relationships, Sex, and Technology – PR Newswire

    Exploring the Future: How Different Generations View Relationships, Sex, and Technology in 2025

    Will New Big Technology Engagements Reshape Innodata’s Growth Path? – Yahoo Finance

    Could New Major Tech Partnerships Propel Innodata to Unprecedented Growth?

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

July 25, 2024
in Technology
Beware of fake CrowdStrike domains pumping out Lumma infostealing malware
Share on FacebookShare on Twitter

CrowdStrike is the latest lure being used to trick Windows users into downloading and running the notorious Lumma infostealing malware, according to the security shop’s threat intel team, which spotted the scam just days after the Falcon sensor update fiasco.

Infostealers such as Lumma scour infected machines for any stored sensitive info, such as site login details and browser histories. This data is then quietly exfiltrated to the malware’s operators to use for fraud, theft, and other crimes.

More specifically, this stolen information is used to gain illicit access to victims’ online bank accounts and cryptocurrency wallets, along with email inboxes, remote desktop accounts, and other apps and services that require legitimate login credentials, which makes this type of malware especially popular among cyber-crooks.

Lumma is a relatively popular stealer that has been in high demand among ransomware crews since 2022. It’s also one of the infostealers that Mandiant says the criminal gang UNC5537 used to obtain credentials that were then used to break into Snowflake cloud storage environments earlier this spring.

In the CrowdStrike campaign, the Lumma build timestamp “indicates the actor highly likely built the sample for distribution the day after the single content update for CrowdStrike’s Falcon sensor was identified,” the security shop noted.

The domain, crowdstrike-office365[.]com, was registered on July 23, just days after CrowdStrike’s July 19 faulty update crashed 8.5 million Windows machines. It speculates that the group behind the domain is linked to earlier social-engineering attacks in June, which also distributed the Lumma malware. 

In these earlier infostealer campaigns, the miscreants spammed out phishing emails, and then followed up with phone calls purporting to be from a Microsoft Teams helpdesk employee.

“Based on the shared infrastructure between the campaigns and apparent targeting of corporate networks, CrowdStrike Intelligence assesses with moderate confidence that the activity is likely attributable to the same unnamed threat actor,” the CrowdStrike team reports.

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

Cybercriminals quickly exploit CrowdStrike chaos

The months and days before and after CrowdStrike’s fatal Friday

CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear

The fake CrowdStrike domain attempts to trick users into clicking on and fetching a .zip file purporting to be a recovery tool to fix the boot loop caused by the bad sensor update. The archive contains a Microsoft Installer file, WidowsSystem-update[.]msi, which is actually a malware loader. 

After the loader is executed by the mark, it drops and runs self-extracting RAR file, plenrco[.]exe, that has a Nullsoft Scriptable Install System (NSIS) installer with the filename SymposiumTaiwan[.]exe. This file includes some code fragments of a legitimate AutoIt executable that is heavily obfuscated, and will terminate if the victim’s machine is running antivirus software.

But assuming the coast is clear, and the malware can continue undetected, the AutoIt loader runs one of two shellcodes, depending on if its a 32 or 64-bit system, and ultimately deploys the Lumma malware.

Just hours after CrowdStrike’s dodgy sensor update sent Windows machines into a BSOD spiral, reports surfaced of scam emails using the outage as a lure and claiming to come from CrowdStrike Support or CrowdStrike Security. The security biz claims that 97 percent of effected systems are now back online. ®

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : The Register – https://go.theregister.com/feed/www.theregister.com/2024/07/25/crowdstrike_lumma_infostealer/

Tags: BewareCrowdStriketechnology
Previous Post

OpenAI unveils AI search engine SearchGPT – not that you’re allowed to use it yet

Next Post

The 10 best immersive sims on PC

Simons Collaborations in Ecology and Evolution – Simons Foundation

Innovative Breakthroughs in Ecology and Evolution Through Collaborative Research

September 19, 2025
Michigan Science Center’s vertical wind tunnel demonstration – CBS News

Experience the Thrill of Michigan Science Center’s Vertical Wind Tunnel Demonstration!

September 19, 2025
Roane State and TCAT Knoxville celebrate ‘Countdown to Grand Opening’ for Knox Regional Health Science Education Center – WVLT

Roane State and TCAT Knoxville Kick Off Exciting Countdown to Grand Opening of Knox Regional Health Science Education Center

September 19, 2025
Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

Huawei Unveils New AI Chip Tech to Challenge Nvidia’s Lead – Bloomberg.com

September 19, 2025
Klutch Sports Group Signs Maria Taylor – Variety

Klutch Sports Group Scores Big with Star Broadcaster Maria Taylor Joining the Team

September 18, 2025
Historic chills fit in nicely at Old World Wisconsin’s Halloween special program – Milwaukee Journal Sentinel

Historic chills fit in nicely at Old World Wisconsin’s Halloween special program – Milwaukee Journal Sentinel

September 18, 2025
The Economy Is Turning Into a Black Box – The Atlantic

The Economy Is Turning Into a Black Box – The Atlantic

September 18, 2025
Massive Attack Say They’ll Remove Music From Spotify – yahoo.com

Massive Attack Announces Plans to Pull Their Music from Spotify

September 18, 2025
Ex-UC Health doctor who performed genital ultrasounds in his apartment sentenced to jail – Cincinnati Enquirer

Former UC Health Doctor Sentenced to Jail for Performing Genital Ultrasounds in His Apartment

September 18, 2025
Readers respond: Politics should avoid zero-sum game – OregonLive.com

Readers Respond: Why Politics Must Move Beyond the Zero-Sum Game

September 18, 2025

Categories

Archives

September 2025
MTWTFSS
1234567
891011121314
15161718192021
22232425262728
2930 
« Aug    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (826)
  • Economy (845)
  • Entertainment (21,724)
  • General (17,113)
  • Health (9,890)
  • Lifestyle (859)
  • News (22,149)
  • People (850)
  • Politics (855)
  • Science (16,056)
  • Sports (21,345)
  • Technology (15,828)
  • World (829)

Recent News

Simons Collaborations in Ecology and Evolution – Simons Foundation

Innovative Breakthroughs in Ecology and Evolution Through Collaborative Research

September 19, 2025
Michigan Science Center’s vertical wind tunnel demonstration – CBS News

Experience the Thrill of Michigan Science Center’s Vertical Wind Tunnel Demonstration!

September 19, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version