new rogue-DHCP server malware :SANS Internet Storm Center; Cooperative Network Security Community - Internet Security - isc(情報元のブックマーク数)

Malware installing rogue DHCP server経由)

ついに、マルウエアがDHCPサーバ機能をもってダメダメDNSIPアドレスを払い出すような機能を持ったそうです。

Thanks to Irwin for alerting us about a new version of rogue DHCP server malware he found in his network. The malware appears to be similar to Trojan.Flush.M which was found last December. Like back then, after infecting its target, the malware installs a rogue DHCP server. The main goal of the DHCP server is to spread a bad DNS server IP address.

InfoSec Handlers Diary Blog - new rogue-DHCP server malware

screenshot