Adversaries may redirect network traffic to adversary-owned systems by spoofing Dynamic Host Configuration Protocol (DHCP) traffic and acting as a malicious DHCP server on the victim network.

Tactics
TA0006 TA0009

Sub-technique of
T1557


See: MITRE ATT&CK