CrowdStrike Chaos: Fake Recovery Manual Spreads Daolpu Malware Amid Falcon Fiasco
CrowdStrike warns that a fake recovery manual for Windows devices is spreading the Daolpu malware. This phishing campaign uses a disguised Microsoft recovery document to install Daolpu, which steals account credentials, browser history, and cookies. Users are advised to follow official CrowdStrike communications for safe recovery.
Hot Take:
Who needs hackers when you have buggy updates doing half the job for them? CrowdStrike’s Falcon update oopsie has launched a malware fiesta, and Daolpu just RSVP’d with a plus one!
Key Points:
- Daolpu malware is spread through phishing emails disguised as recovery manuals for Windows devices.
- The phishing document contains macros that download and execute a base64-encoded DLL, activating the Daolpu stealer.
- Daolpu targets multiple web browsers, including Chrome, Edge, Firefox, and Cốc Cốc, to harvest credentials and cookies.
- The stolen data is sent back to the attackers’ server and then erased from the compromised device.
- CrowdStrike has released a YARA rule for detection and advises users to verify communication authenticity.
Already a member? Log in here