CircleID

Brian Krebs or Washington Post reports that a new Trojan horse masquerading as a video 'codec' required to view content on certain Websites tries to change key settings on the victim's Internet router so that all of the victim's Internet traffic is routed through servers controlled by the attackers.

According to researchers recent versions of the ubiquitous "Zlob” Trojan (also known as DNSChanger) will check to see if the victim uses a wireless or wired hardware route and tries guessing the password needed to administer the router. The malware could then alter the victim's DNS records so that all future traffic passes through the attacker's network first. Eric Sites, vice president of research and development at Sunbelt says: "This is definitely something we have not seen before." Sites said his team is testing the new Zlob variants against multiple routers to see how they fare against the malware. "It was only a matter of time before someone started using this attack."

Read full story: The Washington Post

Related topics: DNS, Malware, Security