#Dridex New year New tricks
Nope, it doesn't use 'DNS' changing as mentioned by some this week. Maybe a little confusion with the webinjects.
It has however changed slightly for persistence in the fact it now uses the startup folder to copy the loader into.