保護自己免受DNS劫持

DNS – 功能變數名稱系統，是互聯網骨幹網的一部分，使您能夠無縫地上網。

功能變數名稱解析的工作原理

You can view a DNS as a phonebook directory where a certain name has a corresponding number. In a nutshell, a DNS is a translator between us and the internet (Computers and other devices in the network). That’s, computers only understand numbers; we humans understand words better.

當您想訪問互聯網上的某項服務時，您要做的第一件事就是輸入域位址，例如 google.com。但互聯網不會理解這一點。它將理解的是IP位址，例如216.58.204.14。查找功能變數名稱的相應IP位址是 DNS 工作。

These IP addresses are stored in DNS servers. These are special kind of computers that resolve, translate and look up for the domain names and their corresponding IP addresses. The internet is made of many DNS servers, and if one DNS server can’t resolve a domain name to its IP address, it passes the request to other DNS servers till the IP address is found. Sometimes, the domain name may not have a corresponding IP address, and you might get a response, “We’re having trouble finding that site or the website doesn’t exist.’’

功能變數名稱系統劫持

如前所述，有多個 DNS 伺服器，DNS 請求將傳遞到不同的 DNS 伺服器，直到找到結果。

DNS hijacking is a malicious practice that involves redirecting your DNS queries to a wrong DNS server. When your query is finally serviced, you end up getting the wrong results. DNS hijacking is dangerous in that you may land on a spoofed site that may look like the legitimate site you wanted to visit. For instance, a spoofed website. It’s even more dangerous when phishing is involved.

In both cases, you might end up giving your confidential and sensitive information unknowingly such as emails, usernames, and their passwords, your credit card number and other Personally identifiable information (PII) that could be used in identity theft and fraud.

有時，它有時可能很煩人和危險。例如，如果您鍵入的功能變數名稱不存在，您的 ISP 可以利用該功能變數名稱並將您重定向到他們載入廣告的網站。其中一些廣告可能具有侵入性並侵犯您的隱私。

您的 DNS 被劫持的方式

• 惡意 DNS 伺服器

Some DNS servers on the internet are compromised, and their purpose is to enable malicious actors to hijack your DNS. When your DNS queries traverse the unsecured internet, you won’t know what DNS server services it. If it gets redirected to a compromised server, your DNS will be hijacked. Good thing, hacking a DNS server is hard, but redirecting your DNS traffic can be quite easy. For instance, there are many free DNS servers online claiming that they can bypass censorships and unblock websites. Since they are free, your DNS traffic will be used to service their costs.

• 惡意軟體

Malware is harmful, and when they target your DNS, they may change your DNS settings to those of a compromised DNS server. This will redirect all your internet traffic to the DNS server, and your personal private information will be harvested without your knowledge. As said earlier, when spoofing and phishing are involved, the damage can be much worse as a result of identity theft.

其他惡意行為者不會帶來太大傷害，但您將為他們獲利。在這種情況下，您將獲得載入重定向和永無止境的廣告的結果。

• 互聯網服務提供者干擾

流氓 ISP 也可以劫持您的 DNS 查詢。這主要發生在您鍵入不存在的功能變數名稱時。您的ISP將劫持「網站不存在」回應，並將其替換為包含相同消息但載入廣告的網站。本網站也可用於收集您的數據。

如何保護自己免受 DNS 劫持

• Use IPBurger VPN

IPBurger VPN routes your internet traffic via a secure encrypted tunnel. This ensures that your DNS queries are not exposed to prying eyes such as cybercriminals who can redirect them to rogue DNS servers. Hence IPBurger VPN provides you security and privacy while surfing the open internet.

• 使用信譽良好的防病毒/反惡意軟體

Reliable antivirus/antimalware software also protects you against unauthorized system changes. This means malware can’t change your DNS settings. Also, remember to update your antivirus/antimalware software regularly.

• 避免使用免費的 DNS 伺服器

Free DNS servers may promise a lot such as giving you access to blocked websites and other internet services. Some may work, and some will only harvest your data and also give you results loaded with ads.

• 定期更新路由器密碼

良好的密碼管理要求您在一段時間后或被包含時更改密碼。大多數流行的路由器都帶有默認密碼，可以在線免費找到。如果您不更改默認密碼，網路犯罪分子很可能會更改路由器的 DNS 設置，從而劫持您的 DNS 查詢。

• 上網時要警惕

DNS hijacking can happen to anyone including authoritative sites – this happens when authoritative DNS servers are poisoned. In this case, you might get legitimate results loaded with ads, or you might be redirected to a new page you have never seen before.