Different Types of Major DNS Attacks
Tags: dns, domainnamesystem, majordnsattack, infosectrain
Published: 2023-09-08 10:04:50


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/xa72p6zlrp26vodetti4.jpg)

## **What is DNS?**
The job of the Domain Name System, or DNS, is to convert IP addresses into domain names and vice versa. It enables computers to communicate with each other over the Internet and other networks, making it a critical infrastructure. DNS is a fundamental component of modern computer networks that helps users access websites and other online services by name rather than having to remember complex numerical IP addresses.

## **DNS Attacks**
DNS attacks refer to various malicious activities aimed at exploiting vulnerabilities in the Domain Name System (DNS). These attacks target the DNS infrastructure, compromising its integrity, availability, and security. Here are some common types of DNS attacks:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/3c9ubpcslmdzwqsltfkn.jpg)

**1.DoS Attack**

A simple DoS (Denial of Service) attack takes one device and one internet connection to attack a remote server. However, they are not very effective at overloading modern global networks.

**2.DDoS Attack**

Attackers utilize multiple servers and internet services to launch a DDoS (Distributed Denial of Service) attack against a website. DDoS attacks establish a botnet of compromised devices that execute malicious queries in the DNS system. Attackers can use the computational power of devices worldwide to query the target network continuously. DDoS attacks are classified into three types:

● Protocol attack: This attack cripples existing server resources or other network equipment like firewalls and load balancers.

● Application layer attack: The attacker makes queries that appear legitimate but exploits the target's weaknesses to crash the web server.

● Flood attack: Floods attempt to render a server unreachable to legitimate traffic by 'flooding' its resources.

**Related Articles**

➔    [How to prevent DDoS attacks?](https://www.infosectrain.com/blog/how-to-prevent-ddos-attacks/)
➔    [DDoS Attacks: How They Are Evolving](https://www.infosectrain.com/blog/ddos-attacks-how-they-are-evolving/)
**3.DNS Spoofing or DNS Cache Poisoning**

DNS spoofing or DNS cache poisoning diverts internet traffic to malicious websites by leveraging security vulnerabilities in the DNS protocol. These are known as man-in-the-middle attacks.

Related article - [All About DNS Spoofing ](https://www.infosectrain.com/blog/all-about-dns-spoofing/)

**4.Fast Flux**

During an attack, an attacker usually spoofs his IP address. Fast flux is a method for continuously updating location-based data to conceal the source of an attack. This will hide the attacker's true location, giving them the time they need to carry out the attack.

**5.DNS Hijacking**

There are three types of DNS hijacking:

●The attacker gains access to a domain registrar account and modifies the DNS name server settings to point to a server under their control.

●Malicious users can modify your domain's IP address record to point to another address.

●Attackers can compromise a company's router and manipulate the DNS server settings, which are automatically distributed to each device when connecting to the network.

## **About InfosecTrain**
[InfosecTrain](https://www.infosectrain.com/) is a renowned global company specializing in cybersecurity training and consulting services. We offer a [CompTIA Network+](https://www.infosectrain.com/courses/comptia-network-certification/) online course to help professionals gain network security knowledge.