TLDR explanation: - User connects to an untrusted network (public wifi). - That network uses DHCP to assign IP address for the user. - A malicious DHCP would

TLDR explanation: - User connects to an untrusted network (public wifi). - That network uses DHCP to assign IP address for the user. - A malicious DHCP would push static routes via DHCP that are more specific than a common default route, and send traffic via a malicious gateway. - User connects to his/her VPN thinking his/her traffic is secured over the insecure network. - The malicious static routes, being more specific, take precedence over the default route added by the VPN.