DNS Servers Leveraged For DDOS Attacks

In a vicious twist of standard DDOS attacks, now attackers are using the DNS servers to do their dirty work.

They send requests to DNS server with a spoofed reply address pointing to the victim’s machine. This helps to easily mask the attack. Also the size of DNS response can be several times larger tha the request thereby making it easier to launch massive attacks with fewer resources.

Unfortunately DNS traffic cannot be blocked as easily as traffic from normal DDOS attacks, which makes it even more dangerous. DNS ensures working of the internet.
via News.com

It appears we are being forced to provide a more secure locatable transport layer for internet 3.