Hacker group has been hijacking DNS traffic on D-Link routers for three months

From zdnet.com

Other router models have also been targeted, such as ARG, DSLink, Secutech, and TOTOLINK.

World Map DDoS Cyber Globe

For the past three months, a cybercrime group has been hacking into home routers –mostly D-Link models– to change DNS server settings and hijack traffic meant for legitimate sites and redirect it to malicious clones.

The attackers operate by using well-known exploits in router firmware to hack into vulnerable devices and make silent changes to the router’s DNS configuration, changes that most users won’t ever notice.

Targeted routers include the following models (the number to the side of each model lists the number of internet-exposed routers, as seen by the BinaryEdge search engine):

Read more…