Which DNS poisoning scenario manipulates a user's proxy settings to redirect to a malicious site controlled by the attacker?

Which DNS poisoning scenario manipulates a user's proxy settings to redirect to a malicious site controlled by the attacker?

• A. DNS cache poisoning
• B. Proxy server DNS poisoning
• C. Internet DNS poisoning
• D. Intranet DNS spoofing

Answer: (B)

When DNS responses are poisoned, users can be redirected to hosts chosen by the attacker. In this scenario, the attacker targets the proxy configuration itself. By poisoning the DNS entry for the proxy server that the user’s device is configured to use, the domain for the proxy resolves to an attacker-controlled address. The user’s traffic then goes through this malicious proxy, which can deliver the attacker’s content or further redirect to a site the attacker controls. This specifically exploits the proxy settings to funnel traffic through the attacker’s infrastructure. DNS cache poisoning involves corrupting resolver caches to misdirect domain lookups, but it doesn’t necessarily involve altering the user’s proxy configuration. The other terms are less precise in describing the targeted manipulation of proxy settings, making the proxy server DNS poisoning scenario the best fit for this question.

When DNS responses are poisoned, users can be redirected to hosts chosen by the attacker. In this scenario, the attacker targets the proxy configuration itself. By poisoning the DNS entry for the proxy server that the user’s device is configured to use, the domain for the proxy resolves to an attacker-controlled address. The user’s traffic then goes through this malicious proxy, which can deliver the attacker’s content or further redirect to a site the attacker controls. This specifically exploits the proxy settings to funnel traffic through the attacker’s infrastructure.

DNS cache poisoning involves corrupting resolver caches to misdirect domain lookups, but it doesn’t necessarily involve altering the user’s proxy configuration. The other terms are less precise in describing the targeted manipulation of proxy settings, making the proxy server DNS poisoning scenario the best fit for this question.