In episode 124 of Cybersecurity Where You Are, Sean Atkinson is joined by Timothy Davis, Lead Cyber Threat Intelligence (CTI) Analyst at the Center for Internet Security® (CIS®). Together, they explore the many layers of a malware takedown operation.Here are some highlights from our episode:01:58. A high-level overview of what a malware takedown might involve04:11. Some of the key players who help to disrupt known malware infrastructure07:35. Which operational functionalities make malware infrastructure and tactics difficult to dismantle10:56. Jurisdictional and legal challenges of a takedown operation14:53. What goes into identifying malware networks and infected end-user devices20:47. The technical strategies used for disrupting malware24:13. How cyber threat actors respond differently to a takedown effortResourcesPhobos Ransomware Affiliates Arrested in Coordinated International DisruptionQakbot Malware Disrupted in International Cyber TakedownEpisode 89: How Threat Actors Are Using GenAI as an EnablerRenew Your Ransomware Defense with CISA's Updated GuidanceIf you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related