DNS SPOOFING

The internet relies on the Domain Name System (DNS) to translate human-friendly website names, like “example.com,” into numerical IP addresses that computers use to connect. DNS acts like the internet's phonebook.

- Words By: Shintu Dhang

WHAT IS DNS SPOOFING?

DNS spoofing (also called DNS cache poisoning) is a cyberattack where hackers trick a DNS server or your device into using fake information. Instead of directing you to the real website's IP address, it sends you to a malicious one controlled by the attacker. Imagine typing “bank.com” into your browser, expecting your bank's site, but ending up on a fake page that looks identical to it. The attacker intercepts or forges the DNS response, replacing the legitimate IP with their own. This often exploits vulnerabilities in DNS protocols, such as a lack of response verification or predictable query IDs.

COMMON TYPES INCLUDE: