DiscoverDISCARDED: Tales From the Threat Research TrenchesThe Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics
The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

Update: 2025-01-07
Share

Description

Hello to all our Cyber Magicians! Join host Selena Larson and guest host,Tim Kromphardt, as they speak with Hannah Rapetti, the Takedown Services Manager at Proofpoint. Hannah shares her fascinating journey from librarian to cybersecurity expert, detailing her path into the industry through certifications, CTFs (Capture the Flag), and the Women in Cybersecurity (WiCyS) community.The conversation dives into real-world examples, techniques, and strategies used to identify, track, and eliminate malicious domains.

Key Topics Covered:
  • Collaborative Efforts: How teams work together to identify scam websites, gather evidence, and escalate for takedown.
  • Tools and Techniques: Using tools like domain search, backend kits identification, and IP-based connections to uncover related sites.
  • Challenges in Takedowns: Managing lists of hundreds of domains across multiple providers, verifying live activity, and the need for ongoing monitoring.
  • Threat Actor Behavior: How threat actors use multiple registrars or re-register domains to evade detection.
  • Best Practices for Organizations:
    • Preemptively purchasing lookalike domains.
    • Monitoring new domain registrations for suspicious activity.
    • Educating users to identify and avoid malicious domains.
  • Ethical Considerations: Balancing infrastructure disruption with the need for ongoing research, particularly for cyber espionage threats.
  • Favorite Wins: Memorable investigations, such as takedowns during the Super Bowl, fake Olympics ticket scams, and real-time disruption of pig-butchering schemes.
The episode highlights the importance of domain takedowns not just for individual companies but for contributing to a safer internet ecosystem. It’s a mix of practical advice, real-life stories, and insights into the ongoing battle against cybercrime.

Resources mentioned:
Genina Po Discarded Episode

https://www.proofpoint.com/us/blog/threat-insight/pig-butchers-join-gig-economy-cryptocurrency-scammers-target-job-seekers

 https://www.wicys.org/ 
https://www.proofpoint.com/us/blog/threat-insight/pig-butchers-join-gig-economy-cryptocurrency-scammers-target-job-seekers 
https://podcasts.apple.com/us/podcast/discarded-tales-from-the-threat-research-trenches/id1612506550?i=1000677061400 
https://www.proofpoint.com/us/blog/threat-insight/security-brief-scammers-create-fraudulent-olympics-ticketing-websites


For more information about Proofpoint, check out our website.

Subscribe & Follow:
Don't miss out on future episodes—subscribe to the Discarded Podcast on your favorite platform.
Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

2025-01-0738:06

Hackers, Heists, and Heroes: The Evolving Ransomware Game

Hackers, Heists, and Heroes: The Evolving Ransomware Game

2024-12-1757:07

Stealth, Scale, and Strategy: Exploring China’s Covert Network Tactics

Stealth, Scale, and Strategy: Exploring China’s Covert Network Tactics

2024-12-0349:29

Scams, Smishing, and Safety Nets: How Emerging Threats Catches Phish

Scams, Smishing, and Safety Nets: How Emerging Threats Catches Phish

2024-11-1551:08

Pig Butcher Scammers Put Job Seekers On The Menu

Pig Butcher Scammers Put Job Seekers On The Menu

2024-10-2939:29

Under Siege: How Hackers Exploit Cloud Vulnerabilities

Under Siege: How Hackers Exploit Cloud Vulnerabilities

2024-10-1533:09

Champagne Attack Chains on a Kool-Aid Budget

Champagne Attack Chains on a Kool-Aid Budget

2024-09-3033:39

Guarding the Vote: Unmasking Cyber Threats in Election Season

Guarding the Vote: Unmasking Cyber Threats in Election Season

2024-09-1732:38

Very Mindful, Very APT: Inside the Activity of Current Espionage Actors

Very Mindful, Very APT: Inside the Activity of Current Espionage Actors

2024-09-0449:36

Rebel Security Training: Cyber Lessons from A Galaxy Far, Far Away

Rebel Security Training: Cyber Lessons from A Galaxy Far, Far Away

2024-08-2003:38

The Art of Frustrating Hackers: Diving Into the DEaTH Cycle with Randy Pargman

The Art of Frustrating Hackers: Diving Into the DEaTH Cycle with Randy Pargman

2024-08-0652:36

The Hunt for Cyber Criminals: A Deep Dive with Wired's Andy Greenberg

The Hunt for Cyber Criminals: A Deep Dive with Wired's Andy Greenberg

2024-07-2455:37

Have you heard: Only Malware in the Building?

Have you heard: Only Malware in the Building?

2024-07-1503:10

Malware Evasion Uncovered: The Battle Against Evolving Malware Techniques

Malware Evasion Uncovered: The Battle Against Evolving Malware Techniques

2024-07-0933:53

Checkmate: Breaking Down Operation Endgame

Checkmate: Breaking Down Operation Endgame

2024-06-2546:57

Hacking the Human Mind: How Cyber Attackers Exploit Our Brains

Hacking the Human Mind: How Cyber Attackers Exploit Our Brains

2024-06-1117:37

Decrypting Cyber Threats: Tactics, Takedowns, and Resilience

Decrypting Cyber Threats: Tactics, Takedowns, and Resilience

2024-05-2913:58

It Works on My Machine: Why and How Engineering Skills Matter in Threat Research

It Works on My Machine: Why and How Engineering Skills Matter in Threat Research

2024-05-0846:55

Decoding TA4903: Exploring the Dual Objectives of a Unique Cyber Threat Actor

Decoding TA4903: Exploring the Dual Objectives of a Unique Cyber Threat Actor

2024-04-0240:57

A Trip Down Malware Lane: How Today's Hottest Malware Stacks Up Against Predecessors

A Trip Down Malware Lane: How Today's Hottest Malware Stacks Up Against Predecessors

2024-03-1956:22

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

The Battle for a Safer Internet: Inside Domain Takedowns and Threat Actor Tactics

Proofpoint