The attack that corrupts DNS cache causing users to be directed to the wrong site is called what?

The attack that corrupts DNS cache causing users to be directed to the wrong site is called what?

• A. ARP Poisoning
• B. DNS Poisoning
• C. HTTP redirect attack
• D. IP Spoofing

Answer: (B)

DNS cache poisoning is when forged DNS responses are inserted into a resolver’s cache, so a domain name ends up resolving to an attacker‑controlled IP address instead of the legitimate one. As a result, users are quietly redirected to a fraudulent or phishing site without any change on the client side. This differs from ARP poisoning, which operates at the local network layer by associating an IP with the wrong MAC address to intercept traffic. IP spoofing involves forging the source address of packets, not corrupting DNS data. An HTTP redirect attack relies on server or client-side redirects in the web protocol, not on altering DNS to misdirect name resolution. Understanding DNS cache poisoning highlights why securing DNS infrastructure (like using DNSSEC and hardening resolvers) is crucial to prevent users from being redirected to malicious sites.

DNS cache poisoning is when forged DNS responses are inserted into a resolver’s cache, so a domain name ends up resolving to an attacker‑controlled IP address instead of the legitimate one. As a result, users are quietly redirected to a fraudulent or phishing site without any change on the client side. This differs from ARP poisoning, which operates at the local network layer by associating an IP with the wrong MAC address to intercept traffic. IP spoofing involves forging the source address of packets, not corrupting DNS data. An HTTP redirect attack relies on server or client-side redirects in the web protocol, not on altering DNS to misdirect name resolution. Understanding DNS cache poisoning highlights why securing DNS infrastructure (like using DNSSEC and hardening resolvers) is crucial to prevent users from being redirected to malicious sites.