Ransomware Lists

[clath13]

Good morning,

Anybody know if McAfee is planning to publish Ransomware IP, Domain, and URL lists?  I've downloaded the lists from abuse.ch (Blocklist | Ransomware Tracker) and incorporated them into my policy but am not able to keep them updated automatically.  It would be nice if McAfee did the leg work on these.

Thanks,

Claire

[Former Member]

Hi Claire,

Are you finding some not covered by the URL GTI database? Spot checking some of the domains (http://trustedsource.org/en/feedback/url), they are covered.

Best Regards,

Jon

[clath13]

Hi Jon,

I spot checked a couple like dechehang.com and http://autohaus-seevetal.com and they are coming back as uncategorized, unverified... Having said that, some of the others I spot checked are in trusted source.  I have my lists for custom ransomware URL, IPs, and domain lists running in addition to using GTI trying to get full coverage.  Seems like overkill but trusted source doesn't have all of them yet.  How does trusted source get their url's besides user submissions?

Thanks,

Claire