> But if you need to have the malicious DNS server connected as a requirement, aren't you already owned? DNS replies can be modified by anyone in the network p

> But if you need to have the malicious DNS server connected as a requirement, aren't you already owned? DNS replies can be modified by anyone in the network path, so it is far more than just compromised DNS server. > The DNS server can tell you the bank's hostname is a malicious IP, and then you can both steal credentials, or MITM. All banks use HTTPS for their websites. A malicious IP is no t enough, unless it also has a forged certificate for the domain.