A reflection-based distributed denial-of-service (DDos) attack in which look-up requests to domain name system servers are spoofed to hide the exploit’s source and redirect the response toward the target. DNS amplification attacks amplify a DNS query into a large payload directed at the targeted network.
