An attacker manipulates DNS so a user's traffic reaches a server the attacker controls. This is a:

1. The victim believes they reached the real website. 2. The attacker sits between them and reads or alters traffic. 3. That is a man-in-the-middle attack. _Source: OpenStax Foundations of Information Systems, Chapter 5, Information Systems Security Risk Management._