New DNS Malware ‘Detour Dog’ Uses TXT Records to Deliver Strela Stealer - Cybernoz - Cybersecurity News

Detour Dog malware uses DNS TXT records to hijack 30,000 sites

The Detour Dog malware has covertly hijacked over 30,000 websites globally, exploiting DNS TXT records to deliver stealthy, location-targeted attacks.

Detour Dog's DNS Hijacking Infects 30,000 Websites with Strela Stealer

Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware.

New DNS Malware ‘Detour Dog’ Uses TXT Records to Deliver Strela Stealer - Cybernoz - Cybersecurity News

Detour Dog, a stealthy website malware campaign tracked since August 2023, has evolved from redirecting victims to tech-support scams into a sophisticated DNS-based command-and-control (C2) distribution system that delivers the Strela Stealer information stealer via DNS TXT records. Tens of thousands of compromised websites worldwide make server-side DNS requests that are invisible to visitors, enabling conditional redirections and remote code e…

New DNS Malware 'Detour Dog' Uses TXT Records to Deliver Strela Stealer

Detour Dog, a stealthy website malware campaign tracked since August 2023, has evolved from redirecting victims to tech-support scams into a sophisticated DNS-based command-and-control (C2) distribution system that delivers the Strela Stealer information stealer via DNS TXT records. Tens of thousands of compromised websites worldwide make server-side DNS requests that are invisible to visitors, enabling […] The post New DNS Malware ‘Detour Dog’ …

Detour Dog exploits DNS to target 30,000 sites with covert malware

Threat group Detour Dog has exploited DNS to covertly infect over 30,000 websites since 2020, shifting from scam redirects to malware delivery via server-side attacks.