DNS articles

DNS tunnelling is a technique threat actors can use to establish a covert communication channel from inside a protected network.

The goal of a Hijacking attack is similar to the goal of cache poisoning attacks, but where the cache poisoning attack can only infect a small set of resolvers the Hijacking attacks targets and infects the source, the authoritative DNS servers. And by changing DNS records at the source, thousands of resolvers can spread the corrupt record, making successful DNS hijacking attacks substantially more dangerous.

The objective for a cache poisoning attack is to infect a DNS resolver cache with bogus data to redirect the victim to a host controlled by the attacker with the intention to extract information or plant malware.

IDC has produced the Global DNS Threat Report survey since 2017. The survey is based on interviews with 1.000 organisation across 5 business size segments from 10 countries on three continents and 10 industry sectors. The report illustrate the important role the DNS increasingly play in the ever-evolving cyber threat landscape and why it is time to take DNS security seriously.