adversaries and bad actors will try to exploit events like this ... ensure that you're engaging with official CrowdStrike representatives.
in a July 19 update on the outage
“The session token is basically like the card key for a hotel.”
“Will see a lot of breaches in coming months from PHP vulnerability”
“A lot of breaches happening in the coming months”
“The recovered logs record successful exploitation, including verification of root access by executing the id command through the installed webshell.”
“We recovered a custom PHP2Shell implementation tailored to the targeted firewall platform, version-specific profiles, exploitation logs and post-exploitation scripts”
“cyber shockwave ripping through our industrial heartlands”