The author goes on to describe DNS spoofing in the following paragraph.  Perhaps this was used for the live.com attack.  He even says, &quot;Within 20 minutes he’s obtained the login details, including passwords for my Live.com, SNS Bank, Facebook, and DigiD accounts.&quot;