Pharming attacks the infrastructure, not attention. Type the address yourself and you still end up in the wrong place.<\/p>\n
Either name resolution is manipulated on the device \u2013 through the hosts file or a substituted DNS server \u2013 or directly at the provider, by altering records in a DNS zone.<\/p>\n","protected":false},"featured_media":0,"template":"","glossary_intl_set":[],"glossary_intl_cluster":[392],"glossary_intl_theme":[],"class_list":["post-29157","glossary_intl","type-glossary_intl","status-publish","hentry","glossary_intl_cluster-cybersecurity"],"acf":{"card_description":"Redirection to forged sites through manipulated DNS.","nav_theme":"","nav_subtheme":"","dataset_version":"","term_inline":"","term_plural":false,"heading_overrides":null,"synonyms":null,"lead_definition":"Pharming is an attack that manipulates name resolution so that users land on a forged site even though they typed the address correctly. Unlike phishing, it requires no click on a link.","at_a_glance":[{"bullet":"
Pharming needs no click<\/b> \u2013 the address is right, the destination is not.<\/p>\n"},{"bullet":"
The point of attack is name resolution, not the person.<\/p>\n"},{"bullet":"
A certificate warning is often the only visible signal.<\/p>\n"}],"intro_answer":"","steps_answer":"","steps":null,"examples":[{"example":"A manipulated home router redirects banking addresses to a rebuilt page."},{"example":"A hijacked domain account changes DNS records and intercepts all incoming mail."}],"misconception":[{"myth":"\u201cIf I type the address myself, nothing can happen.\u201d","reality":"That is exactly what pharming targets: the address is right, the resolution is not. Only the certificate gives certainty."}],"faq":[{"q":"How does pharming differ from phishing?","a":"Phishing needs a message and a click; pharming manipulates name resolution. The BSI<\/a> describes both methods."},{"q":"Does HTTPS help against pharming?","a":"Partly: the certificate then fails to match the address and the browser warns. ENISA<\/a> covers the wider threat picture."}],"compare_answer":"","compare":null,"variants":null,"signals_answer":"","signals":null,"protect_answer":"","prevent":null,"incident":null,"related_terms":null,"pillar_link":null,"sources":[{"publisher":"","name":"BSI: methods of cybercrime","url":"https:\/\/www.bsi.bund.de\/DE\/Themen\/Verbraucherinnen-und-Verbraucher\/Cyber-Sicherheitslage\/Methoden-der-Cyber-Kriminalitaet\/methoden-der-cyber-kriminalitaet_node.html","doc_type":"","group":"used"},{"publisher":"","name":"ENISA Threat Landscape","url":"https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2024","doc_type":"","group":"used"}],"reviewer":{"name":"Jakub Novak","qualification":"IT security","date":"2026-06-01"},"disclaimer":""},"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t