What is DNS Hijacking?
DNS (Domain Name System) Hijacking (or poisoning) occurs when a hacker changes a computer’s settings to either ignore DNS or use a DNS server controlled by other hackers. DNS is considered the “phone book of the internet.” It allows browsers to translate websites into IP address numbers. By interrupting this system, it allows attackers to redirect communication to fraudulent sites, like fake login pages for banks and credit cards, which they then use to steal login information.
How to Recognize This Threat: DNS hijacking is difficult for the average user to recognize, as it occurs behind the scenes and may not always affect regular web browsing behavior. Signs can exist though, including difficulty navigating the web. Online testers exist to determine if your DNS has been hijacked.
How to Prevent This Threat: A hacker still needs a way in to launch a DNS hijacking attack, so keep all applications up-to-date with the latest patches, and ensure your network has a state-of-the-art firewall with active security services.