DNSkárosítás

DNSkárosítás, often translated as DNS poisoning or DNS cache poisoning, is a form of computer security attack in which the authenticity of a DNS response is compromised. In this attack, an attacker corrupts the Domain Name System data by introducing falsified information. This can lead to users being redirected to malicious websites instead of the intended ones, even when they type the correct URL.

The attack typically targets DNS resolvers, which are servers that translate human-readable domain names (like example.com) into machine-readable IP addresses (like 192.0.2.1). When a user requests a website, their computer queries a DNS resolver. If this resolver has been poisoned, it may return a fraudulent IP address. This IP address could point to a server controlled by the attacker, designed to steal credentials, distribute malware, or conduct other malicious activities.

There are several methods an attacker might use to achieve DNS poisoning. One common technique involves exploiting vulnerabilities in the DNS protocol or in specific DNS server implementations. Another method is to intercept and modify DNS queries and responses between a user and a legitimate DNS server. The consequences of DNSkárosítás can range from inconvenience to severe financial loss and identity theft, making it a significant cybersecurity threat.