Excerpt from Wikipedia: Pi-hole is a Linux network-level advertisement and Internet tracker blocking application which acts as a DNS sinkhole and optionally a DHCP server, intended for use on a private network. It is designed for use on embedded devices with network capability, such as the Raspberry Pi, but it can be used on other machines running Linux, including cloud implementations.
Configuring PiHole to resolve IP towards Quad9, which is currently the best public available malware domain filtering DNS service. On top of that you can add your own lists. Recommended lists are the two below.
Sources for malware lists:
- A blocklist of malicious websites that are being used for malware distribution, based on the Database dump (CSV) of Abuse.ch. Domains and IP addresses, source at GitHub.
- Steven Blacks unified hosts file with base extensions. Adware + malware, source at GitHub