Trend Micro has detected a new DNS changing form of malware, which poisons other hosts on the local subnet installing a rogue Dynamic Host Configuration Protocol (DHCP) server on the network.