Cache Poisoning

Cache poisoning, often referred to as DNS poisoning, is the act of breaking into the server of a Domain Name System and substituting a genuine internet address with that of a rogue address. When a web surfer enters that address, the request redirects them to the rogue entry planted by the attacker. These fraudulent sites are typically platforms for viruses, worms, spyware and identity theft schemes. Cache poisoning can effect unknowing users in various ways, increasing the amount of fast spreading infections. One commonly used technique is the placement of compromised domains into spam messages in which attackers will create appealing subject lines that tempt users into opening them. Another ploy uses attractive ads and banners to lure recipients to sites compromised by cache poisoning. Once the victim’s system has been infected with a terribly nefarious code, all future requests to legitimate web sites will automatically redirect to fraudulent domains, even if the victimized DNS server has resolved the issue.