Google Search Results Alert Users of DNSChanger Trojan Infection

Example of the new warning Google will display to those infected with DNSChanger TrojanGoogle is embarking on an awareness-raising program that will see it notify roughly half a million users that they may be on the brink of losing their Internet connection as a result of a malware infection.

Google will alert users via its search results page if it believes they are infected with the so-called DNSChanger Trojan.

“Our goal with this notification is to raise awareness of DNSChanger among affected users,” wrote Damian Menscher, a Google security engineer, in a company blog post.

“We believe directly messaging affected users on a trusted site and in their preferred language will produce the best possible results.”

The trojan was capable of hijacking people’s computers and altering its domain name system (DNS) settings. That allowed its authors to redirect users when browsing the internet, pointing them to fake sites.

The Federal Bureau of Investigation (FBI) and Estonian authorities were able to take over the servers originally run by Trojan’s perpetrators, redirecting infected users back to their intended destination.

But those servers are set to be turned off imminently – the court order keeping the servers whirring runs out July 9. When that happens, users whose machines are still infected will lose their ability to surf the web.

Industry groups have been working relentlessly to warn infected users about the risks.

But according to Menscher, a significant number remain infected and have proved hard to reach with previous education campaigns.

“Many of these campaigns have had limited success because they could not target the affected users, or did not appear in the user’s preferred language,” he said.

This article was originally published on V3.

Related reading

Google Sandbox Is it still affecting new sites in 2019 search tools updates competitive analysis
Decommissioning Jet Two charts proving Walmart planned to ground Jet all along