DNSChanger Trojan Still in 12% of Fortune 500
Summary: A court-ordered deadline of July 9, 2012 will disconnect any systems still infected with the DNSChanger Trojan from the Internet when the surrogate control servers are powered down. According to Internet Identity, 12 percent of Fortune 500 companies and four percent of major U.S. federal agencies remain infected, while the DNSChanger Working Group counted more than 300,000 infected systems by IP address and Google estimated more than 500,000 on May 22.
What you should know: The court extended the original March 8 cutoff to July 9 because cleanup was taking longer than expected, and infected machines also have antivirus disabled and likely carry other malware bundled with DNSChanger. When the servers go dark, those systems lose domain-name resolution and can reach little beyond their ISP's home page and mail server until DNS settings are restored.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026