DNS security extensions, such as DNSSEC, are used to authenticate your query responses and prevent cache poisoning. But it may be easier for an attacker to simply hack into your registrar account or other platform that has the ability to manipulate your domains, and hijack them.
Protecting your domains from unauthorized manipulation
Cybercriminals hack DNS provider to take over Brazilian bank
Shortly before this manuscript went to final review, news emerged via the 2017 Kaspersky Security Summit in St. Maarten of a sophisticated attack on a major Brazilian bank ,in which the attackers successfully hacked into the bank's DNS provider and then modified its DNS settings to take complete control over its traffic.
For a period...