Stub resolver hijacking

A stub resolver converts queries from applications on a device into DNS requests that are sent to a DNS server.

Stub resolver hijacking is where the attacker compromises the Operating System of a computer or other device with malicious code that intercepts and responds to DNS queries with rogue or malicious responses.

Note: For the purposes of this document, this includes modifications of the hosts file, even though this technically bypasses actual DNS lookups.