Does anyone know whether the rogue DNS server was successfully used to redirect any traffic to sites which may have intercepted /captured user data, banking details etc? For example I presume if the DNS had issued a fake IP for a bank it would be possible to create a proxy site for that bank that logs on to and presents data from the real bank.... but captures login details and the like for later exploit. Similarly it could be used to proxy and capture logins to Amazon, Paypal, eBay, Office 365, or anything else.... no doubt many other capabilities too. Keen to know if everyone who has used a network behind a hacked router should be recommended to change *everything*!
