cancel
Showing results for 
Search instead for 
Did you mean: 
clath13
Level 9

Ransomware Lists

Good morning,

Anybody know if McAfee is planning to publish Ransomware IP, Domain, and URL lists?  I've downloaded the lists from abuse.ch (Blocklist | Ransomware Tracker) and incorporated them into my policy but am not able to keep them updated automatically.  It would be nice if McAfee did the leg work on these.

Thanks,

Claire

0 Kudos
2 Replies
McAfee Employee

Re: Ransomware Lists

Hi Claire,

Are you finding some not covered by the URL GTI database? Spot checking some of the domains (http://trustedsource.org/en/feedback/url), they are covered.

Best Regards,

Jon

0 Kudos
clath13
Level 9

Re: Ransomware Lists

Hi Jon,

I spot checked a couple like dechehang.com and http://autohaus-seevetal.com and they are coming back as uncategorized, unverified... Having said that, some of the others I spot checked are in trusted source.  I have my lists for custom ransomware URL, IPs, and domain lists running in addition to using GTI trying to get full coverage.  Seems like overkill but trusted source doesn't have all of them yet.  How does trusted source get their url's besides user submissions?

Thanks,

Claire

0 Kudos