2025 DNS Threat Landscape Report

Over the past year, threat actors have rapidly advanced their use of deception—scaling operations and leveraging AI to target individuals, organizations, and evade threat research. Infoblox Threat Intel has observed a new level of professionalism and speed in the way actors launch Domain Name System (DNS)- sourced cyberattacks, which affect consumers, businesses, and government agencies alike.

To defend effectively, security teams must understand the threats they face. Gaining insight into adversarial DNS techniques, the actors behind them, and the risks they pose is essential to strengthening defense strategies.

This report draws on vast volumes of real-time DNS telemetry, cutting-edge analytics, and decades of threat expertise to provide a unique perspective on how attackers exploit DNS. It also outlines the business implications and highlights DNS-based intelligence as a critical layer of modern cyberdefense.