The internet runs on protocols that most people never think about. DNS, the Domain Name System, is one of them. It quietly powers everything from checking your email to streaming your favorite show.

Hackers are stashing malware in a place that’s largely out of the reach of most defenses—inside domain name system (DNS) records that map domain names to their corresponding numerical IP addresses.