DNS Early Detection - Breaking the Black Basta Ransomware Kill Chain

Tags

External References

• https://blogs.infoblox.com/
• https://otx.alienvault.com/

Description

This intelligence analysis examines the Black Basta ransomware campaign, which has significantly impacted businesses and critical infrastructure across North America, Europe, and Australia. The report highlights Infoblox's ability to identify and block over 78% of the malicious domains associated with Black Basta, on average 59.5 days prior to their availability in open-source intelligence (OSINT) sources. Infoblox's DNS Early Detection capability enabled the proactive blocking of these malicious domains, potentially preventing data theft, legal implications, and other consequences for affected organizations.

Date