Chinese researchers have uncovered a widespread, ongoing malware campaign that has hijacked over 100,000 home routers and modified their DNS settings to hack users with malicious web pages. The campaign has many similarities with the infamous DNSChanger malware that works by changing DNS server settings on an infected device, allowing attackers to route the users’ internet traffic through malicious servers and steal sensitive data. Between September 21 and 27, the GhostDNS campaign compromised more than. More than 87.8 percent of devices (which equals to 87,800) are located in Brazil only.
Source: https://thehackernews.com/2018/10/ghostdns-botnet-router-hacking.html