Keeping Ransomware Attacks at Bay with DNS

Ransomware currently dominates the headlines and is top of mind for many. DNS can be used to improve protection against ransomware campaigns and speed up investigations of such incidents. In this session, we’ll share fresh tactics, techniques, and procedures (TTPs) used by ransomware actors which actively adopt advanced persistent threat (APT)-style tactics and evasion techniques. These actors’ goals have shifted from deploying ransomware on a few vulnerable machines to achieving persistence in the network and causing maximum damage to push victims into paying the ransom. On October 12th, 2021 at 1 p.m. BST, join the Cisco Umbrella team and (ISC)2 as they share DNS-based classifiers developed by Cisco and discuss their approach to building them based on changes in the threat landscape.