DNSChanger - Definition from the Hotspot Shield Glossary
DNSCharger was a form of malicious DNS Trojan attack perpetrated by an Estonian business called Rove Digital. The malware operated by modifying a computer’s DNS records to point traffic towards a different location; that location was infact the businesses own servers which in turn imported its own advertising into websites.
During its operation from 2007 to 2012 DNSCharger was reported to have infected around 4 million computers and netting the company a staggering 14 million USD in profits. The malware was unwittingly installed on users devices as it claimed to be a video codec that was required to watch web content. After it was installed, the malware would modify the DNS configuration and direct the device to their own servers and advertising affiliates. After a lengthy investigation, seven people are charged and arrested in connection with the attacks.