A mysterious new Trojan, dubbed QHosts-1 (a.k.a. Delude.B), has been responsible for several recent drive-by DNS "hijackings". The exploit results from a vulnerability in Internet Explorer that allows malicious attackers to run the code of their choice on affected systems.
Full Story