The most common attack against DNS is actually people's registrar accounts being compromised. That even happened to Google. This is used a ton by malware autho

The most common attack against DNS is actually people's registrar accounts being compromised. That even happened to Google. This is used a ton by malware authors, who silently add records to host malicious websites on benign domain names. DNSSEC is completely useless here.