Compromised Routers, DNS, and a TDS Hidden in Aeza Networks

A financially motivated threat actor has covertly hijacked DNS settings on compromised routers to funnel user traffic through a shadow DNS and HTTP traffic distribution system hidden in Aeza Networks, enabling persistent, selective redirection to malicious content while evading detection for years.