Banking malware has become a prevalent category of malware that poses a major threat to users and organizations of all sizes. Talos has seen Dyre propagate through spam and phishing emails sent to users. The latest versions of Dyre employ a domain generation algorithm to allow attackers to better anonymize their infrastructure and evade detection. As attackers evolve, defenders will also need to evolve and understand how attackers are moving to evade defenses. Dyre incorporates this practice in order to remain operational since the attackers change the domain name daily.”]
Source: https://blogs.cisco.com/security/talos/threat-spotlight-dyre