Very nice - so this is the perfect exploit - pretty hard for evil people to do, but easy for the device owner to do to regain control of their own hardware.
ARP spoofing allows this attack to be run. Still needs to be in the local network though. (Pretend to be the router and intercept the DNS.)