What is DNS Spoofing?

You have probably heard of phishing attacks, but are you familiar with the term DNS spoofing?

Imagine this for a moment: You want to bank online securely and type in your bank’s trusted URL. You are redirected to a website that looks exactly the same, but in reality, it is a fake copy. Your login credentials are stolen, and your bank account is drained. 

This scenario might sound like something out of a movie, but thanks to DNS spoofing, it is unfortunately a reality.
DNS spoofing is the cunning trick that cybercriminals use to direct you to fake websites. They manipulate the system that converts internet addresses into understandable names, making you think you are on the correct website, while in reality, you end up in a dangerous place. 

So technically speaking, it goes like this: Criminals manipulate the DNS servers to tamper with the translation of domain names to IP addresses. This sends the user to the wrong, dangerous, website, even if he or she enters the correct URL.

What is DNS and why is it important?

It’s important to understand what DNS actually is. DNS stands for Domain Name System and is essentially the phone book of the internet. When you visit a website like, for example, my.host, DNS translates this name into an IP address, a series of numbers indicating the location of the website on the internet. Without DNS, you would have to remember a long series of numbers every time you wanted to visit a website.

DNS spoofing vs DNS cache poisoning.

DNS spoofing and DNS poisoning are often used interchangeably, but there is a subtle difference. Both techniques deceive users by directing them to fake websites, but they work in slightly different ways.

• DNS poisoning: With DNS poisoning, the DNS cache of a server is poisoned with false information. This means that every user who uses this server is directed to the wrong website.
• DNS spoofing: DNS spoofing is a broader term that includes all attacks where DNS records are altered to redirect users. DNS poisoning is thus a form of DNS spoofing.

In short: DNS poisoning is a specific attack technique that falls under the broader category of DNS spoofing. Both attacks can have serious consequences, such as stealing personal data and installing malware.

In summary, all DNS poisoning falls under DNS spoofing, but not all DNS spoofing is DNS poisoning.

How can you protect yourself?

• Use a reliable antivirus: A good antivirus can help protect your computer from malware.
• Check URLs and use HTTPS: Always carefully check the URL of the website you are visiting and ensure it starts with “https://” instead of “http://”. The “s” stands for “secure” and means that the communication between your browser and the website is encrypted.
  This significantly reduces the chance of being redirected to a fake website. Also, check for the padlock icon in the address bar, indicating the connection is secure.
• Be cautious with public Wi-Fi networks: On public networks, it’s easier for hackers to carry out DNS attacks.
• Use a VPN: A VPN encrypts your internet traffic and makes it harder for hackers to intercept your traffic.

Regularly update your software: Ensure your computer and all software are always up-to-date.