Most high-profile attacks on Domain Name Service (DNS) servers are distributed denial-of-service (DDoS) attacks. But there are even more nefarious attacks on these systems underway today as cyber criminals and APT actors abuse DNS servers. DDoS attacks may be the most well known abuses of DNS servers, but malware owners and authors are increasingly using it to build out their command-and-control infrastructures. Zscaler: “DNS has been around forever. But there’s an overwhelming lack of expertise” in it.”]
Source: https://www.darkreading.com/authentication/attacks-rise-on-network-blind-spot