Knowledge Base ISC Main Website Ask a Question/Contact ISC
Webinar: Cyber Crime Remediation
Author: Reference Number: AA-00979 Views: 2637 Created: 2013-06-07 00:14 Last Updated: 2018-04-20 23:30 0 Rating/ Voters

In November 2011 there was a takedown of a cyber criminal gang who created the 'DNS Changer' (aka Ghost Click) malware. The work behind the scenes required many years of fact gathering and widespread international cooperation.

The current activity revolves around international notification efforts — making end users aware of the potential problem and helping them correct the issues created by the malware. This is not easy. How do ISPs determine which users have been affected? How do they then handle their own internal remediation efforts? What issues need to be considered?

ISC’s Security Information Exchange (SIE) is one of the conduits for exchanging remediation information. This webinar will discuss technical and policy issues surrounding remediation for DNS Changer, and will offer resources on how you can help within your organization.


Who should attend this Webinar?

Network Administrators: Find out how you can determine whether devices in your network are affected by DNS Changer and how to effectively remediate for your environment.

Network Operators: Learn how you can get information about whether devices in your organization have been affected by DNS Changer.

Security Engineers: Discover how sensitive security related information can be exchanged in a trusted environment.

Hosting Providers: By default, most of your hosting customers are using your DNS resolvers. Learn how to determine whether any of your customers have been affected by DNS Changer.

Service Providers: Learn how to determine whether your customers are affected by DNS Changer and what you can do to help with notification and remediation efforts.

Mobile Telecoms Operators: Learn how to determine whether smartphone devices in your environments have been affected by DNS Changer.

SCADA and Critical Industrial System Operators: Learn how to determine whether devices in your network are affected by DNS Changer and how to effectively remediate for your environment.



Merike Kaeo

Director of Resiliency and Security Forum

Internet Systems Consortium


This was presented on 22nd May, 2012


© 2001-2018 Internet Systems Consortium

For assistance with problems and questions for which you have not been able to find an answer in our Knowledge Base, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership.

ISC relies on the financial support of the community to fund the development of its open source software products. If you would like to support future product evolution and maintenance as well having peace of mind knowing that our team of experts are poised to provide you with individual technical assistance whenever you call upon them, then please consider our Professional Subscription Support services - details can be found on our main website.

2012-05-22-Slides.pdf 3.4 Mb Download File
  • There is no feedback for this article
Quick Jump Menu