Someone recently boasted about adware which can inject ads from most networks, and using DNS spoofing would make the providers think that the ads were on a website owned by me (i.e.
www.myscamsite.com), while the ads are actually on a normal website (i.e.
www.stackoverflow.com). This sounds dubious to me, because most websites these days use HTTPS to prevent DNS spoofing.
- Could this method work on HTTP sites?
- Could this method work on HTTPS sites (somehow?)
I know the ISP's did it to routers years ago, but that was before HTTPS.