- Posted on
What is DNS cache poisoning aka DNS spoofing? Attackers can poison a DNS cache by tricking DNS resolvers into caching false information, with the result that the resolver sends the wrong IP address to clients, and users attempting to navigate to a website will be directed to the wrong place.
DNS = Domain Name System (The name to address - phone book of the internet.) Are you visiting the correct website you intended to? Your bank, email and other accounts are actively spoofed and hijacked by this method and misspellings.
How do attackers poison DNS caches?
Attackers can poison DNS caches by impersonating DNS nameservers, making a request to a DNS resolver, and then forging the reply when the DNS resolver queries a nameserver. This is possible because DNS servers use UDP instead of TCP, and because currently there is no verification for DNS information.
DNS spoofing and censorship
Several governments have intentionally poisoned DNS caches within their countries in order to deny access to certain websites or web resources.
Source:
https://www.cloudflare.com/learning/dns/dns-cache-poisoning/
Related articles:
What Is DNS Poisoning? (Fortinet)