Its a site called top10vpn. This is spam.

As far as I can tell this attack only makes a client connect to the wrong network, by dynamically rewriting the SSIDs using a man in the middle.

So the attacker doesn't control the wrong network access point, they just make the client connect to it when it thinks it's connecting to something else.

It relies on both networks sharing the same credentials, and at the end, the attacker cannot man in the middle the connection itself. They have just forced the user to connect to a different network than intended.

That's what I thought when I read it too, not entirely clear what's new here.