Trojan uses a key internet feature to receive marching orders

If malware uses a remote command-and-control server to function, its relatively easy to cripple it by blocking the internet addresses it uses. Its not always that easy, however, and researchers at Ciscos Talos group have found a textbook example of this in action. A recently discovered Windows PowerShell trojan, DNSMessenger, uses the Domain Name Service for communication — you know, one of the cornerstones of the internet. Few computer users are equipped to block DNS without c…
Read more