[Eset]Win32/Sality newest component: a router?s primary DNS changer named Win32/RBrute

[igor51]

Win32/Sality newest component: a router?s primary DNS changer named Win32/RBrute

DNS hijacking is still going strong and the Win32/Sality operators have added this technique to their long-lasting botnet. This blog post describes how the malware guesses router passwords as part of its campaign to misdirect users, send spam and infect new victims.

The post Win32/Sality newest component: a router?s primary DNS changer named Win32/RBrute appeared first on We Live Security.

Source: Win32/Sality newest component: a router?s primary DNS changer named Win32/RBrute