Half of Fortune 500s, US Govt. Still Infected with DNSChanger Trojan
Summary: More than two months after authorities shut down the DNSChanger botnet, Internet Identity found evidence of at least one infection at half of all Fortune 500 firms and at 27 out of 55 major government entities. The Trojan alters a computer's Internet settings to hijack search results, blocks security sites and Microsoft updates, and turns off antivirus software, and the surrogate DNS servers keeping infected machines online are only authorized to run until March 8, 2012.
Why it matters: Roughly 500,000 of the more than four million infected machines worldwide were in the United States, and unless the court order is extended, every one still infected loses the ability to browse the Web on March 8 - a deadline the Conficker Working Group's experience suggests could arrive with nearly 3 million systems still uncleaned in that earlier case.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026