The July 19, 2024 Windows outage was caused by a faulty CrowdStrike Falcon content update—not by a cyberattack. Criminals separately exploited the confusion with fake support messages, phishing links, and malware. Treat any unsolicited “fix” as suspect: verify support through a known official channel and navigate to vendor guidance yourself.
Two events happened—and they should not be confused
A CrowdStrike Falcon content configuration update for Windows sensors triggered the widespread outage on July 19, 2024. CrowdStrike’s root-cause analysis describes the update failure; CISA said the incident affected Windows 10 and later systems, not Mac or Linux hosts, and was not malicious cyber activity. The UK National Cyber Security Centre (NCSC) likewise assessed that the outages were not the result of a security incident.
Separately, threat actors took advantage of the disruption to target people looking for information or a quick recovery. CISA warned on July 19 that it had observed phishing and other malicious activity exploiting the incident. The outage itself is not evidence that an affected computer was infected or deliberately attacked.
How opportunistic scams used the outage
Scammers used CrowdStrike-related names and the urgency of restoring service to make lures seem credible. CISA, the NCSC, and the U.S. Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HHS HC3) warned that outage-related phishing could target organizations and individuals. Common warning signs include an unsolicited offer to repair a device, a message claiming urgent action is required, or a link or attachment presented as a remediation tool.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- WHAT YOU GET: FixMeStick Virus Removal Tool for Windows PCs (Windows XP, Vista, 7, 8, 8.1, 10, and 11. 512 MB RAM required), Getting Started Guide, our virus removal guarantee backed by our friendly Canadian based Customer Support Team.
CyberScoop reported on July 23, 2024, that threat researchers had observed more than 2,000 CrowdStrike-related domains registered in the preceding seven days. That is a dated observation reported by the publication, not a current count or a measure of how many people were affected. CrowdStrike’s historical threat-intelligence page lists domains it identified as malicious and advises using official communication channels. Treat such lists as historical indicators, not as a live blocklist: ownership, registration, and use of a domain can change.
Malware and activity reported in the campaign
CyberScoop’s July 23 report described several distinct examples of malware-themed lures and payloads. They illustrate the kinds of threats reported at the time; they do not establish that every outage-related message or file was malicious, nor do they establish the total number of victims.
Rank #2
- 【Wide Application for Data Security】These USB‑A port locks are widely used in commercial, office, educational, public, medical, and household environments, providing comprehensive data security. They effectively prevent unauthorized access to USB ports and protect sensitive information.
- 【Perfect Fit for USB‑A Ports】Specially designed for standard USB‑A ports, these locks fit securely on PCs, laptops, and tablets. The tight and stable fit ensures reliable protection without loosening or falling out. Easy to Lock and Remove
- 【Easy to Lock and Remove】These USB port locks can only be removed with the included keys, balancing security and convenience. Installation and removal are simple and tool‑free, making daily management easy.
- 【Dual Protection】: Security & Dustproof Provides physical security to block unauthorized USB connections, while preventing dust, dirt, and moisture from entering ports. This dual protection enhances data safety and extends the service life of devices.
- 【Multiple Colors and Quantities Available】These USB‑A port locks are available in two colors and various quantities to meet different color‑coding and organization needs
| Reported example | What the report said | What is established |
|---|---|---|
| Daolpu | A Word document carried the Daolpu information stealer. | Reported by CyberScoop as part of opportunistic activity. |
| HijackLoader | A ZIP file aimed at Latin America was associated with HijackLoader. | Reported by CyberScoop; the regional targeting description applies to that example. |
| Connecio | A Python information stealer was identified as Connecio. | Reported by CyberScoop as a separate example. |
| Wiper malware | A phishing PDF led to a ZIP file containing wiper malware, according to analysis by ANY.RUN cited by CyberScoop. | The reported delivery chain is distinct from the outage cause. A persona called “Handala Hack” claimed responsibility; that claim is not independently established attribution. |
CyberScoop also cited SentinelLabs researcher Tom Hegel saying the broader scope remained unclear. No independently verified total number of victims of these opportunistic campaigns is established in the cited reporting. Microsoft’s estimate, also cited by CyberScoop, that at least 8.5 million Windows devices were disabled refers to outage impact—not malware infections or confirmed compromises.
How to check a support message safely
- Pause before responding. Do not trust an unsolicited call, email, text, or direct message offering a quick repair, even if it uses outage-specific language or a familiar company name.
- Verify the sender independently. If someone claims to be vendor support, contact the vendor through its official website or a support channel you already know. Do not use the phone number, reply address, or link in the unsolicited message. CrowdStrike urged customers to communicate with its representatives through official channels and follow guidance from its support teams.
- Go to guidance directly. Type a known web address or use a saved, trusted bookmark rather than clicking an unsolicited link. CISA and HHS HC3 recommend using legitimate sources; the NCSC advised affected organizations to consult vendor guidance.
- Do not open alleged repair files. Avoid attachments or downloads claiming to contain a fix unless they are provided through an independently verified official channel and are intended for your organization’s circumstances.
- Follow the instructions for your situation. Affected organizations should use their vendor’s official recovery guidance and their own incident-response process. Individuals should be wary of anyone requesting credentials, remote access, payment, or sensitive information in exchange for help.
HHS HC3 specifically advised verifying an unfamiliar person’s claimed identity directly and typing a known web address instead of following a link. It warned that malicious messages could lead to data theft, ransomware, or extortion. If you already opened a suspicious file or granted someone access, contact your organization’s IT or security team—or the relevant service provider—through a trusted channel promptly.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #3
- EFFECTIVE USB DATA PROTECTION This USB data protection fully blocks USB ports to unauthorized data transfer, file copying or malware It provides data leakage for personal, and commercial devices, reducing the risk of sensitive information exposure
- EASY INSTALLATION This USB port blocker features a design: simply with the USB port and insert until you hear a clear, no extra tools required Once installed, the can only be removed with the dedicated tool rotated 90 degrees, cannot be pried off by ordinary methods, and supports repeated use
- WIDE COMPATIBILITY This USB security fits all standard USB-A ports, making it a suitable USB port blocker for desktop, USB security for laptop, USB port for router, and USB disable for, as well as compatible with switches and other USB-enabled devices
- & COLOR CODING DESIGN This USB port with removal tool is for the body and sturdy metal for the, supporting long-term repeated use It is available as a multi color USB port set, allowing you to use different colors to distinguish devices or management groups for more efficient organization
- COMPLETE PACKAGE Each removable USB port with set includes 10 USB blocks and 1 dedicated metal removal tool This 10 pack USB port can provide protection for multiple devices at once, and the dedicated design enhances security to unauthorized removal of the locks
What the outage means for organizational resilience
The incident also exposed a broader operational challenge: organizations depend on software supply chains and need plans for when a widely used update disrupts systems. The U.S. Government Accountability Office’s September 23, 2024 review identifies supply-chain risk management, software testing, contingency planning, and information sharing as areas that affect organizations’ ability to mitigate cyber risk. Those are resilience measures; they do not change the cause of this outage or make every later scam part of the same event.
Quick Recap
Rank #4
- 【Wide Application for Data Security】These USB‑A port locks are widely used in commercial, office, educational, public, medical, and household environments, providing comprehensive data security. They effectively prevent unauthorized access to USB ports and protect sensitive information.
- 【Perfect Fit for USB‑A Ports】Specially designed for standard USB‑A ports, these locks fit securely on PCs, laptops, and tablets. The tight and stable fit ensures reliable protection without loosening or falling out. Easy to Lock and Remove
- 【Easy to Lock and Remove】These USB port locks can only be removed with the included keys, balancing security and convenience. Installation and removal are simple and tool‑free, making daily management easy.
- 【Dual Protection】: Security & Dustproof Provides physical security to block unauthorized USB connections, while preventing dust, dirt, and moisture from entering ports. This dual protection enhances data safety and extends the service life of devices.
- 【Multiple Colors and Quantities Available】These USB‑A port locks are available in two colors and various quantities to meet different color‑coding and organization needs
Official guidance and incident context
- CISA: Widespread IT Outage Due to CrowdStrike Update (July 19, 2024).
- UK NCSC: Statement on major IT outage and phishing threat (July 19, 2024).
- HHS HC3: Phishing Attacks Following Global Technology Outage (July 23, 2024).
- CrowdStrike: Channel File 291 Incident: Root Cause Analysis is Available (August 6, 2024).
- U.S. GAO: Cyber Resiliency: CrowdStrike Outage Highlights Challenges (September 23, 2024).
- CyberScoop: Low-level cybercriminals are pouncing on CrowdStrike-connected outage (July 23, 2024).
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
