DNS hijacking is still going strong and the Win32/Sality operators have added this technique to their long-lasting botnet. This blog post describes how the malware guesses router passwords as part of its campaign to misdirect users, send spam and infect new victims.
The post Win32/Sality newest component: a router?s primary DNS changer named Win32/RBrute appeared first on We Live Security.