has anyone using The Cloud WiFi experienced a malicious change to their bookmarks?

[EdS2]

This demonstrates that an http connection is at the mercy of all the intermediaries. Sadly, hp.com don't have an https version, which would have ensured that the data you get is the data they sent.

The only https area I could find is
https://h20564.www2.hp.com/hpsc/swd/publ...g=en&cc=uk

I don't know if visiting that would be enough to fix the icon. It might depend on datestamps - the fake icon might have a very recent datestamp.

Just possibly you could visit and bookmark a link such as the above, to get the proper icon, and then edit it to point to the page you actually wanted.

If you start your visit at http://hp.com or any other unencrypted place, all bets are off because every link you visit thereafter could have been messed with. Which is why it's such a terrible idea for the banks to have http sites which redirect to their https e-banking facilities - if the first page is vulnerable you may be directed elsewhere.