DNS servers are often used by attackers one of two ways to attack. The first type of DNS attack is called a cache poisoning attack. Second type of attack happens when attackers take over one or more authoritative DNS servers for a domain. Attackers can capture all in-bound traffic and collect traffic logs that contain sensitive information. Twitter suffered a similar attack by the Iranian Cyber Army in 2009, when the group altered DNS records and redirected traffic to servers they controlled on servers controlled by the group. The attack is also most problematic to undo when an attacker gained access to the New York Times, Melbourne, and the Melbourne, Australia.”]
Source: https://www.csoonline.com/article/2133916/three-types-of-dns-attacks-and-how-to-deal-with-them.html