The DNSchanger Trojan uses different methods to manipulate the DNS lookup of the victim. One of the most malicious techniques is using CSRF to attack the ADSL or cable router and modify its DNS tables.
More Information:
- McAfee: DNSChanger Trojans v4.0, Dec 4th 2008
