Meet Extenbro, a new DNS-changer Trojan protecting adware

ZMsiXone · Jul 15, 2019

https://blog.malwarebytes.com/trojans/2019/07/extenbro-a-new-dns-changer-trojan-protecting-adware/

July 15, 2019
Recently, we uncovered a new DNS-changer called Extenbro that comes with an adware bundler. These DNS-changers block access to security-related sites, so the adware victims can’t download and install security software to get rid of the pests.

From our viewpoint, this might be like sending in an elephant to save the mosquito, but the threat actors behind this attack have been known to use aggressive tactics in the past. What do they care if they open up your machine to all kinds of threats by disallowing you access to security sites and blocking any existing security software from getting updates? They just want to serve you adware.
Click to expand...

Rasheed187 · Jul 20, 2019

Interesting, not a lot of malware make use of DNS manipulation. And even more weird, SpyShelter doesn't seem to monitor DNS settings. I'm not sure but I believe that GlassWire does do this.

Log in or Sign up

Meet Extenbro, a new DNS-changer Trojan protecting adware

ZMsiXone Registered Member

Rasheed187 Registered Member

Log in or Sign up

Meet Extenbro, a new DNS-changer Trojan protecting adware

ZMsiXone Registered Member

Rasheed187 Registered Member

Useful Searches