The user types the URL of an Internet application and he is navigated to an application, which is not even close to the real one.
-
DNS poisoning.
-
Phishing.
-
Social Engineering.
-
Network eavesdropping.
DNS poisoning corrupts the DNS resolution process, causing the correct URL to resolve to a malicious server's IP address instead of the legitimate one. Phishing tricks users into visiting fake sites, social engineering manipulates people, and eavesdropping involves passive listening.
When a user correctly types a legitimate URL but is silently routed to a completely different, fraudulent site, the most likely cause is DNS poisoning (cache poisoning) — an attacker corrupts DNS resolution so the domain name resolves to the wrong (malicious) IP address, even though the user did everything right. Phishing instead relies on tricking the user into clicking a disguised/fake link or email, not typing the real URL. Social Engineering is a broader people-manipulation tactic, not a technical redirection. Network eavesdropping only involves passively observing traffic, not redirecting the user to a different application.