Ransomware
FAQ – What Is The Lifecycle Of A Ransomware Incident?
It is important to understand the various stages of a ransomware attack. This is key to knowing how one can defend against them. In this Netsurion video it shows us…
Read more
FAQ – What Is An Effective Defence Against Ransomware Attacks?
Sadly there is no one size fits all solution that will protect you against ransomware attacks. Using a proactive and layered approach to security will limit the chance of a…
Read more
FAQ – Who Carries Out Ransomware Attacks?
Ransomware attacks are carried out by threat actors. They used to be classified into two types of threat actors - Criminal Gang - State Sponsored Group There is now a…
Read more
FAQ – What Policies Are Used When Responding To Ransomware?
There are various frames of thought when it comes to responding to a ransomware attack. One approach is to refuse to pay the ransom, whereas others might be up for…
Read more
FAQ – How Is Ransomware Categorized?
There are a plethora of ransomware packages available for those that have malicious intent as well as those that want to search for them. Ransomware can be mainly broken down…
Read more
FAQ – What Are The Types Of Ransomware?
It is important to understand the various stages of a ransomware attack. Knowing these different stages will allow you to have a better of understanding how to defend against them.…
Read more
FAQ – Why Has Ransomware Become So Popular?
Ransomware has been around for over 3 decades. Only now though has it become majorly widespread as a form of cybercrime. Roughly 1/4 of all malware incidents are caused by…
Read more
Part 3 De-Anonymizing Domains on the Dark Web – Favicon matching
Favicon Matching The second method that is used to uncover a dark web based website on the surface internet (clear internet) is the process of "favicon matching". A favicon is…
Read more
Part 2 De-Anonymizing Domains on the Dark Web – TLS Certificate Matching
The first approach used by Cisco's Talos Threat Intelligence team was that of TLS certificate matching. With this approach the self signed certificate that is used by their dark web…
Read more
The Ability to De-Anonymize Domains on the Dark Web
Members of the Cisco Talos Threat Intelligence team have developed 3 techniques to identify ransomware operators websites hosted on the dark web and their respective IP Addresses. This has given…
Read more