Posté par: igor51 le juillet 13, 2012, 18:00:06
=== Not really, especially in Latin America. Every day we register lots of similar attacks, each abusing local DNS settings. Actually these attacks are a bit different because they modify the local HOST file but the principle is the same - redirecting the victim to a malicious host via malicious DNS records. Latin American cybercriminals are used to recycling old techniques used elsewhere in the past and what is happening right now is a growth of attacks abusing local DNS settings. The latest social engineering-based malware attack in Mexico - which imitated the Mexican tax office - is a recent example of this.
Source: Is it the end of the DNSChanger Trojan? (http://www.securelist.com/en/blog/208193671/Is_it_the_end_of_the_DNSChanger_Trojan)