Security experts from Qihoo 360 NetLab spotted GhostDNS, a malware that already infected over 100K+ devices and targets 70+ different types of routers. Most of the infected devices are located in Brazil, most of them (87.8%) located in the country. Attackers have already hijacked over 100,000 home routers, the malicious code allows to modify DNS settings to hijack the traffic and redirect users to phishing websites.GhostDNS reminds us of the infamous DNSChanger malware that made the headlines for its ability to change DNS settings.”]
Source: https://securityaffairs.co/wordpress/76727/malware/ghostdns-malware-campaign.html