Redirecting Outgoing DNS Requests toward a Fake DNS Server in a LAN

摘要

This paper shows a new DNS attack that hijacks DNS requests by frequently injecting fake DNS server, and then network systems communicate with wrong destinations. So requests with different destination DNS IP addresses can be redirected toward a fake DNS server by a hacker. This type of attack is detectable by neither the IDS nor any anti spoofing software.