Although /etc/hosts/ is a file that comes up a lot in security, I am surprised to find there is no discussion here on this forum that describes how this can be used for an attack.
Thinking about it, I find myself, slightly unclear about what an attacker can achieve from this.
Few things that I can think of are :
- Add a new entry say : "127.0.0.1 google.com" to mount a DoS to prevent access to google.com
- Delete the hosts file to prevent any kind of network communication ?
3.Spoof an website " bank.com"
Are there any known attacks that particularly target /etc/hosts ?
What other possibilities are there ?