The attacker was able to access the DNS records for the Fox-IT.com domain at their third-party domain registrar, change them to point to a server in their ownership, and intercept and then forwarded the traffic to the primary server that belongs to Fox-IT. He used a popular type of attack which is called a Man-in-the-Middle (MitM) attack.
Read more