Skip navigation.

Use default passwords, get hijacked

Zlob (or as known DNSChanger) will modify the DNS settings to use other rogue DNS servers. These name servers will resolve non-existing domains (typo-squatting) to IP addresses associated with the authors to generate revenue and could potentially re-routes traffic from legitimate web sites to other suspicious web sites.

Continue reading at the Extreme Security Blog


I'm interested in analyzing a sample of the Win32 version of this worm. Anyone here have a link to download the exe?