DNS spoofing

What is DNS spoofing?

DNS spoofing, short for Domain Name System spoofing and also referred to as DNS cache poisoning, is a type of cyberattack in which domain name servers are compromised via fake data to redirect users to harmful websites. Common targets for DNS spoofing attacks are places with unprotected public Wi-Fi, as hackers have an easy time abusing these DNS servers’ weak security posture and introducing fake data. DNS spoofing attacks come in a variety of shapes and sizes—including man-in-the-middle attacks and DNS server compromise—making it increasingly difficult for organizations to effectively detect and prevent them.

 

How to prevent DNS spoofing

Though some spoofing attacks are extremely hard to detect, many are easy to spot, and user awareness training can empower your employees to make a difference. Establishing clear policies about processes like sending wire transfers also helps mitigate the risk of business email compromise, CEO fraud, and other spear phishing attacks. To counter cousin domains, some businesses deliberately buy all similar domains. This has the added benefit of reducing the risk of trademark infringement.

DNS spoofing - prevention with user awareness training

Finally, advanced email security solutions can quickly analyze inbound emails for signs of email spoofing and other anomalies.  Vade for M365 analyzes email headers to determine if the display name and email address are consistent with the company’s entity model. It also adds an SPF-like layer into the email filtering process that spots unauthorized use of legitimate domain names and cousin domains.

About Vade

Vade for M365 is powered by a collaborative AI engine that continuously learns from an alliance of more than 1.4 billion protected mailboxes, millions of daily user reports, and a team of cybersecurity analysts. Combining AI-powered email security and integrated features that are made for MSPs, you’ll save time, reduce admin workload, and get more ROI from cybersecurity.

Learn more about Vade for M365 >