DNS Spoofing (Cache Poisoning)

DNS spoofing (or DNS cache poisoning) is an attack where a [[dns-cache|DNS cache]] is corrupted with false data, causing the [[dns-resolver|resolver]] to return incorrect IP addresses. This can redirect users to malicious sites that impersonate legitimate ones.

Example

A cache poisoning attack could make your ISP's DNS resolver send users of your-bank.com to a phishing site instead of the real bank.

Referenced in Guides