Detour Dog Unleashed: The Invisible Cyber Menace Hijacking 30,000 Websites!
Detour Dog is back, and this time, they’re not just barking—they’re biting. Infoblox Threat Intel’s research reveals this sneaky cybercrime group has been secretly infecting websites since 2020. Their latest trick? Using DNS hijacking to deliver Strela Stealer malware, making your internet browsing a potential comedy of errors. Stay safe out there!

Hot Take:
Looks like Detour Dog has been busy barking up the wrong trees—or should we say websites—around the globe. It’s like a bad dog that keeps finding new tricks and old bones to bury, and those bones are made of malware and DNS hacks. Who knew that the internet’s phonebook could be used for ordering up a side of cyber chaos with a sprinkle of fraud on top?
Key Points:
– Infoblox Threat Intel reveals Detour Dog has infected over 30,000 websites since 2020.
– The group uses DNS hijacking with TXT records to secretly control malware deployment.
– 90% of site visits appear normal, keeping infections undetected for over a year.
– Shift to Strela Stealer malware occurred in June-July 2025, distributed by partner Hive0145.
– Infected sites span 89 countries, with automated bot traffic suspected in massive DNS queries.