CyberGuard dictionary / Network Security

DNS Spoofing

THE DEFINITION

Manipulation of DNS information so a name resolves to an unintended destination.

In simple terms

Someone changes or forges an address lookup so a familiar name leads somewhere else.

Technical explanation

Spoofing may target a resolver cache, local hosts file, or DNS response path; the exact mechanism determines suitable defenses.

A forged or altered response causes a name to resolve to an unintended destination. Defenses differ by attack path and can include protected resolver access, DNSSEC validation where deployed, and certificate checks.

Examples in practice

A device receives a forged DNS answer pointing a banking name to an impostor site.

On a compromised public network, a laptop is handed a false response for a familiar site. The browser's certificate warning becomes an important second signal that the destination may be an impostor.

Why it matters

A familiar domain name is not enough if name resolution has been tampered with.

VERIFY & LEARN MORE

Sources and further reading

Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.

← Browse all definitions