0
$\begingroup$

DNS Spoofing and DNS Hijacking, both of them basically are type of attacks where the request is redirected to some other malicious website or some other web page. But I did not find some concrete difference between them, Can someone please explain the primary difference between DNS Spoofing and DNS Hijacking..

$\endgroup$
0
$\begingroup$

One way of explaining the primary difference between DNS Spoofing and DNS Hijacking is given by this site as:

While DNS spoofing is often confused with DNS hijacking as both happen at the local system level, they are two different types of DNS attacks.

Most of the time, DNS spoofing or cache poisoning just involves overwriting your local DNS cache values with fake ones so you can be redirected to a malicious website.

On the other hand, DNS hijacking (also known as DNS redirection) often involves malware infections in order to hijack this important system service. In this case, the malware hosted on the local computer can alter the TCP/IP configurations so they can point to a malicious DNS server, one that will eventually redirect the traffic to a phishing website.

So, DNS spoofing is where some malware or something else changes values in your local DNS cache (on your PC, for example), with fake values so you would query and go to the wrong destination.

DNS hijacking, on the other hand, is not so much about attacking your local DNS cache, but something else like the TCP/IP configurations so your PC's pointer to DNS is diverted to a malicious DNS server that could redirect traffic to a malicious website.

$\endgroup$
2
  • $\begingroup$ @auspiciou99 Thanks for answering, I got some clearance. $\endgroup$
    – Atul Kumar
    Jul 10 '20 at 4:29
  • $\begingroup$ @AtulKumar No problem. If any of the answers helped, you could accept (click the check mark button). $\endgroup$ Jul 10 '20 at 10:29
0
$\begingroup$

DNS Spoofing is a DNS attack that changes DNS records returned to a querier DNS Hijacking is a DNS attack that tricks the end user into thinking they are communicating with a legitimate domain name.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.