crowdstrike

Согласно сообщению Decrypt, CrowdStrike и Министерство юстиции США во вторник объявили, что уничтожили ботнет Sality, который был активен с 2003 года.Этот ботнет на протяжении последних восьми лет в основном использовал вредоносное ПО EggJagger для перехвата криптовалютных платежей, инструмент, который отслеживает адреса криптовалютных кошельков жертв в их буфере обмена и заменяет их на адреса оператора, что приводит к тому, что жертвы отправляют средства незнакомцам.CrowdStrike оценивает, что только с помощью этого груза EggJagger оператор как минимум украл 12,1 миллиона рублей (около 150 тысяч долларов). Украденная криптовалюта в основном не была потрачена, и CrowdStrike оценивает, что эти неиспользуемые активы на пике в январе 2025 года будут стоить около 147 миллионов рублей (номинально около 1,35 миллиона долларов). Sality смогла выжить до сих пор, потому что у нее нет центрального сервера, который можно было бы конфисковать, зараженные машины общаются друг с другом напрямую.Эта многонациональная операция затрагивает США, Болгарию, Венгрию и Румынию. Министерство юстиции США, ФБР и Управление уголовных расследований Министерства обороны конфисковали домены, связанные с Sality, на территории США, а полиция нескольких европейских стран также конфисковала другие домены.CrowdStrike, используя уязвимости своей архитектуры, изолировала более 15 тысяч зараженных машин в контролируемом ею ловушке. Оператор был отслежен как SALTY SPIDER, который в сентябре 2023 года совершил атаку отказа в обслуживании на российскую криптовалютную биржу AvanChange.

Согласно сообщениям ChainCatcher, данные рынка Gate показывают, что акции CrowdStrike (CRWD.O) выросли на 10%, что является максимальным ростом с 14 июля.

Сообщение от ChainCatcher, согласно данным Gate, акции Crowdstrike на предторговых торгах выросли на 9.6% после того, как компания повысила прогноз годового дохода.

According to a report by Cointelegraph, a report released by cybersecurity company CrowdStrike shows that losses from cryptocurrency assets caused by North Korean hackers and threat actors exceeded $2 billion in 2025, a 51% increase year-on-year, despite a decrease in the number of attacks. CrowdStrike stated that North Korean hackers are the largest threat organization targeting cryptocurrency users, and the stolen funds are almost certainly used to finance the regime's military programs.Attackers prioritize high-value targets, mainly focusing on Web3 projects and cryptocurrency exchanges, as stolen funds are easier to cash out and transfer anonymously. In April of this year, the Ethereum Foundation identified 100 North Korean hackers, and the Drift Protocol was infiltrated by North Korean tech workers, resulting in a loss of $280 million, with these threat actors establishing face-to-face relationships through third-party intermediaries.

ChainCatcher news, according to Jinshi reports, CrowdStrike stated that it is understanding how the issue (which caused global chaos yesterday) occurred and is conducting a thorough root cause analysis to determine how the logical flaw happened. The company stated, "We are committed to identifying any improvements in our infrastructure or workflows to strengthen our processes. As the investigation progresses, updates will be provided on the results of the root cause analysis. Currently unaffected systems will continue to operate as expected, and there will be no risk of such incidents occurring in the future." The company's CEO, George Kurtz, posted on social media that the company has prepared a technical overview regarding the incident and will continue to work with customers and partners to address this event.

ChainCatcher message, Musk tweeted that CrowdStrike has been removed from all our systems. CrowdStrike founder George Kurtz stated that Mac and Linux hosts were not affected, and this incident was not a security breach or cyber attack. The issue has been identified, isolated, and a fix has been deployed.

ChainCatcher news, according to Jinshi reports, Microsoft (MSFT.O) stated that the root cause has been fixed. Due to a recent update to the CrowdStrike Falcon sensor software, Windows 365 Cloud PCs experienced issues. Although the root cause has been resolved, residual impacts continue to affect some Microsoft 365 applications and services.Meanwhile, a spokesperson for the Nasdaq exchange stated that European markets and pre-market trading in the U.S. are operating normally, and the U.S. market is expected to open normally.

ChainCatcher message, CrowdStrike founder George Kurtz posted on the X platform that CrowdStrike is actively working with customers affected by the Windows host content update defect. Mac and Linux hosts are not affected, this incident is not a security incident or cyber attack, the issue has been identified, isolated, and a fix has been deployed. CrowdStrike advises customers to visit the support portal for the latest information and to communicate with CrowdStrike representatives through official channels. The company team has been fully mobilized to ensure the safety and stability of customers.

ChainCatcher news, Polygon's Chief Information Security Officer Mudit Gupta tweeted that a significant portion of global IT infrastructure is currently paralyzed, including emergency services, airports, and stock exchanges. The issue stems from a vulnerability in the latest version of Crowdstrike Falcon EDR, causing Windows devices to crash and reboot continuously. Polygon Labs also uses Crowdstrike but was not affected because they conduct testing before deploying non-critical updates. Mudit Gupta expressed confusion that other companies supporting critical operations did not take similar precautions.Additionally, he emphasized that even if Polygon Labs were affected by this IT incident, the Polygon network would remain unaffected because its network is decentralized.