Comment by ar0

The German BSI (Federal Office for IT Security) quotes the advisory from CrowdStrike (which is behind their customer login portal) as saying you need to roll-back to snapshots prior to 04:09 UTC:

https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen...

So your Redditor saying 05:00 UTC seems to be close.