That’s why you should always use a trustworthy VPN when on any network you can’t vouch for.
Pulse of Truth
Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
A VPN would not have helped with this. People connecting to the decoy wifi network were redirected to phishing pages that they willingly gave their info to. HTTPS was still present, the criminal still could not have intercepted information that wasn't input into the phishing page. With a VPN, you would have still been redirected exactly the same way.
If the vpn offered its own dns, then it would never used the compromised dns.
You generally have to accept the captive portal pages before your vpn connection will be allowed.