Episode 124: The Many Layers of a Malware Takedown Operation

In episode 124 of Cybersecurity Where You Are, Sean Atkinson is joined by Timothy Davis, Lead Cyber Threat Intelligence (CTI) Analyst at the Center for Internet Security® (CIS®). Together, they explore the many layers of a malware takedown operation.

Here are some highlights from our episode:

• 01:58. A high-level overview of what a malware takedown might involve
• 04:11. Some of the key players who help to disrupt known malware infrastructure
• 07:35. Which operational functionalities make malware infrastructure and tactics difficult to dismantle
• 10:56. Jurisdictional and legal challenges of a takedown operation
• 14:53. What goes into identifying malware networks and infected end-user devices
• 20:47. The technical strategies used for disrupting malware
• 24:13. How cyber threat actors respond differently to a takedown effort

Resources

• Phobos Ransomware Affiliates Arrested in Coordinated International Disruption
• Qakbot Malware Disrupted in International Cyber Takedown
• Episode 89: How Threat Actors Are Using GenAI as an Enabler
• Renew Your Ransomware Defense with CISA's Updated Guidance

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].