Any device that reaches the Internet is susceptible to ransomware from the web. DNS security is used to block ransomware and keep your devices safe. Watch the video below as Dr. Paul V. Mockapetris, Chief Scientist at ThreatSTOP, goes over the ways security blocks ensure the safety of your data.

 

 

How Can a Computer Get Infected With Ransomware?

Devices that are used to access the web, including laptops, computers, phones, and tablets, are targeted by malicious actors. These cybercriminals can create infected websites that look legitimate, which tricks users into visiting dangerous sites. They sometimes infect innocent sites, which is nearly impossible to predict from the user's point of view. There are also times when a malicious actor infects an ad for a site. When the user clicks on the ad, they may be infected.


How Does DNS Security Block Ransomware?

Ransomware blocking works on several different levels. The first, and most important, is that it prevents you from going to these infected sites. Security for ransomware, like that offered through ThreatSTOP, is updated on a continuous basis. It is able to communicate with the network when a user clicks on a link that is corrupted. It will either warn the user that they are about to enter a dangerous area, or it will make entering that website impossible by blocking entry.


What Happens if I Click on an Infected Site?

There may be times when a user clicks on an infected site despite a warning. It is also possible for an innocent site to be corrupted, which could then infect the user's device. The good news is that security for ransomware can still protect your equipment. Ransomware needs to communicate with its operators in order to cause harm. The right security system can block that transaction. Your device will still be infected, but the infection will not be activated.

Do you need protection against malicious actors who want to exploit your data and devices? Contact us and speak with an expert. We will help you learn more about our services so you and your employees can access the web without worry. Call us today!

Get a Demo

 

Learn More:

What DNS Security Does A Typical Enterprise Need?

DNS Defense Cloud 

DNS Defense 

 

Video Transcript
0:00 Intro
0:25 Can DNS Security Block Ransomware?
1:00 How Does Ransomware Work?

DNS security can block ransomware in a number of different ways. First of all, the way you probably got started in getting infected with ransomware is by going to a website that you shouldn't have that's owned by a malicious factor or perhaps just infected by a malicious actor. 

0:25 Can DNS Security Block Ransomware?
There's been times where completely innocent websites get infected by a malicious actor, either directly or they place an ad that has malware out there through one of the advertising agencies, and when the ad gets served, it tries to give you a ransomware infection.

So the first way that DNS can help block ransomware attacks is by keeping you from going to a dangerous place. That's the first step. But suppose you already clicked on it. Is there any protection to be had? 

1:00 How Does Ransomware Work?
Well, one of the things is that the ransomware needs to communicate with its operators in order to do its operations, and DNS filtering can block that transaction. Maybe you get infected but never get activated.

Some people call this the kill chain, but basically, ransomware needs to do three or four things to be successful. If you could interrupt any of those, I mean, hopefully, you never got infected in the first place, but if you can block the command and control channel that it uses to get commands from the bad guys, that will keep you safe for a while.

It's all about making life as inconvenient as possible for the ransomware operator, and that's what DNS filtering does.