The latest social engineering-based malware attack in Mexico which imitated the Mexican tax office is a recent example of this. The author of this malware has been operating since at least 2004 and apparently lives in Peru. The main means of spreading the malware is email and the most widely-targeted email provider is Yahoo mail. There are at least 11,540 downloads of the malware and overall it has been detected by 9 out of 31 antivirus engines. That basically means there are some 8,000 infections out there.”]
Source: https://securelist.com/is-it-the-end-of-the-dnschanger-trojan/33429/