Unless a router is compromised along the route, which is a known thing, and part of why we use ssl everywhere now.
the grandparent comment https://news.ycombinator.com/item?id=34629050 also describes some more common ways that this can happen without routers being compromised
Unless a router is compromised along the route, which is a known thing, and part of why we use ssl everywhere now.