DNS Cache Poisoning
1-minute read
What it is
DNS Cache Poisoning is an attack that corrupts DNS resolver caches with false records, redirecting users to malicious destinations without their knowledge.
Why it matters
Victims can be silently routed to phishing or malware-hosting sites, undermining trust and bypassing traditional web security protections.
How to reduce risk
- Enable DNSSEC to cryptographically validate DNS responses
- Use trusted, well-monitored DNS resolvers
- Monitor DNS behavior and logs for anomalies or suspicious changes
Related Terms: DNS Hijacking, DNSSEC (Domain Name System Security Extensions), URL Spoofing
External Resources:
- Cloudflare – DNS Cache Poisoning Explained: https://www.cloudflare.com/learning/dns/dns-cache-poisoning/