
Normally, when users enter a domain name into the browser, the Domain Name Server (DNS) maps it into its corresponding IP address. A DNS attack occurs when the malware overrides the TCP/IP settings of the system, to redirect queries made to the DNS. The individual behind the attack directs traffic to a website of choice. DNS hijacking occurs in two ways. One method infects computers with malware, rendering it incapable of translating the domain address entered by the user to its matching IP-address. The other method involves hacking specific websites and changing their DNS addresses.
...