How to detect malicious actor altering DNS responses?
I am trying to detect what is causing my DNS to return fake IP addresses for domains like apple, orange, etc. which obviously don’t exist.
If I do following on my Windows machine:
ipconfig /flushdns – flush DNS cache
ping apple – invoke…