Secure your data with protective DNS
Table of Contents
From Covid-19, WFH and data security
When Covid-19 was declared a pandemic, threat actors saw an opportunity and there’s a rise in Covid-19 related cyber attacks. From “Covid-19 vaccine” to “Covid-19 relief programs”, Covid-19 was used as a bait, using phishing emails and website pop-ups as the tools for the chaos and attack.
Cybercriminals manipulated the internet and trick users into opening a malicious attachment or clicking a malicious URL. Hackers create websites that appear to be legitimate. Users who were unable to confirm the legitimacy of these website becomes a victim of cyber attack.
Work from home (WFH) program was supposed to protect employees from the Covid-19 virus and keep people safe. But WFH created a security problem that was exploited by threat actors. WFH means laptops and computer operating outside the company’s firewall. These devices are vulnerable from attacks. Providing more potential victims to be hacked.
Many people and institutions, from government to corporations, hospitals and schools, fell victim to hackers. These cost billions in lost business and productivity. Not to mention the lost data and data breaches that created another set of information security nightmare.
Protection from phishing emails and malicious website.
Consumers and small businesses need a way to protect themselves that is effective, easy to configure, reliable and affordable. Does not only protect the data but protect their privacy as well.
One way to protect our system from visiting malicious website is to use a Protective DNS service (PDNS).
PDNS prevents access to domains known to be malicious. Preventing access to malware, ransomware, phishing attacks, viruses, malicious sites and spyware at source. This makes our computers and network more secure and our data safe.
PDNS are provided for free for public and home use. Commercial and enterprise PDNS are available for companies who needs more control of their endpoints and network devices.
Without Protective DNS service
A user clicks on a link and visits a dangerous website (evil.example.com) and download a malware installer.
The malware connects to a site (bigevil.example.net) and downloads additional malware that further infects the system.
The malware communicates to a command and control server (cc.example.org) which exploit the system for other malicious purpose.
With Protective DNS service
When a user clicks a malicious link, the browser contacts the PDNS server to resolve the domain. If the domain is malicious, the PDNS will provide a no respond message which will cause the browser to issue a “Can’t find that site” error. This prevents the malware installation.
Quad9 Protective DNS Service
Quad9 is free and provides end users security and privacy. Quad9 protects users from accessing malware, malicious domains, botnet infrastructure, and more. Leveraging threat intelligence from multiple industry leaders; it currently blocks up to sixty million threats per day.
Quad9 blocks against known malicious domains, preventing computers from connecting to malware or phishing sites. Whenever a Quad9 user clicks on a website link or types in an address into a web browser, Quad9 checks the site against a list of domains provided by 19 different threat intelligence partners.
Based on the results, Quad9 resolves or denies the lookup attempt, preventing connections to malicious sites when there is a match.
Protect your data thru PDNS
Protective DNS is an effective and simple way to protect your data no matter whose PDNS service you use. A recent study shows that around 30% of cyber-crime events (total) could be mitigated by using a PDNS.
PDNS are not only useful for phishing spam or lookalike links in web pages – but they protect against much more. Malware and spyware that gets installed through other means often will try to “phone home” or trick your browser into visiting lookalike pages, and PDNS can help with that protection.
Antivirus and PDNS
If you or your organization uses a firewall or any anti virus software, consider PDNS as an added security to your network. PDNS work as a complimentary solution to your current security practice.
PDNS will not affect your internet but in some cases may improve the browsing speed.
PDNS is not a silver bullet of network security nor its a perfect solution. PDNS is one of many tools that are available to keep our network and data safe. It provides another layer of security that can be use in combination with other applications.
The number of security threats keeps on rising every day, it’s still better to have that layer of defense than not at all.
- Global Cyberalliance
- Protective DNS (PDNS) – NCSC.GOV.UK
- Coalition of nonprofits join together to help businesses secure remote workforce
- No-Cost Malicious Domain Blocking and Reporting for U.S. Hospitals
- Selecting a Protective DNS Service – Department of Defense
- Tips on Selecting a Protective DNS Service
- Fake Websites Used in COVID-19 Themed Phishing Attacks, Impersonating Brands Like Pfizer and BioNTech
- FBI Probing 2 Hospital Ransomware Attacks; Hackers Remove Health Data
- Ransomware attack knocks South Carolina hospital’s computer systems offline