DNS Hijacking (DNS 劫持)

DNS hijacking (sometimes referred to as DNS redirection (DNS 重定向)) is a type of malicious attack that overrides a computer’s TCP/IP settings to point it at a rogue DNS server (覆盖 TCP/IP 设置，使其指向一个流氓的 DNS 服务器), thereby invalidating the default DNS settings. In other words, when an attacker takes control of a computer to alter its DNS settings, so that it now points to a rogue DNS server, the process is referred to as DNS hijacking.

By default, your computer is configured to use the DNS server from the ISP (Internet Service Provider)

危险性

The dangers of DNS hijacking can vary and depend on the intention behind the attack. Many ISPs such as “OpenDNS” and “Comcast” use DNS hijacking for introducing advertisements or collecting statistics (显示广告、收集用户数据)

预防

• 安装杀毒软件
• 不要从不可信的网站上面下载软件