BGP hijacking how to empty digital wallets

BGP hijacking: Last night, MyEtherWallet users started noticing something strange. When they logged in to the service, they were presented with an unsigned SSL certificate and of course a warning.
It was unusual, but it was the kind of problem that some people usually react to without thinking.
Anyone who clicked on this certificate warning was redirected to a server in Russia, which emptied the user’s digital wallet. Judging by the transaction activity, the attackers appear to have already acquired more than $17 million in Ethereum.
MyEtherWallet confirmed the attack in a statement on Reddit.
“We are currently in the process of verifying the servers to resolve this issue as soon as possible,” the company told users. “We advise users to run a local (offline) copy of MyEtherWallet.”
The attackers do not appear to have compromised MyEtherWallet itself, but rather exploited an Internet infrastructure, intercepting DNS requests for myetherwallet.com. This made the Russian server appear to be the legitimate owner of the address.
To intercept these requests, the hackers used a technique known as BGP hijacking. This technique spreads incorrect routing information to intercept traffic in transit. Typically, using such a hijacker requires intruding into BGP servers operated by an ISP (Internet Service Provider). In this case, the hijacking occurred at an ISP in Chicago, although the root cause is still unknown.
So far, MyEtherWallet is the only service confirmed to have been the target of this type of attack.
BGP hijacking has long been known as a fundamental vulnerability in the Internet. The story is a very good example of what can happen when we act automatically, or impulsively without thinking.
See the certificate used:

• HTTP and HTTPS: What I need to know about the transport protocols