Cybercriminals Duped: When Hackers Attack Fake Infrastructure and Brag About It!

Forescout fooled pro-Russia hackers into attacking a fake water treatment plant. TwoNet, the hacktivist group, bragged about the phony attack on Telegram, but the real lesson here is the importance of security vigilance. Remember, in a real-world scenario, that laughable own goal could turn into a critical hit.

Pro Dashboard

Hot Take:

Who knew cybercriminals could be so easily catfished? TwoNet got played like a violin, and now they’re the butt of the cybersecurity world’s jokes. It’s a classic case of “look before you leap,” or in this case, “check the credentials before you hack.” Hats off to Forescout for turning the tables and demonstrating that sometimes the best defense is a good honeypot!

Key Points:

  • Forescout tricked the TwoNet hacktivist group into targeting a fake water treatment facility.
  • TwoNet exploited default credentials and a vulnerability to deface and disrupt the honeypot system.
  • The group bragged about the faux attack on their Telegram channel, thinking it was a real success.
  • TwoNet’s presence has been sporadic, reappearing in September after initially going dark in March.
  • The incident highlights the importance of robust security measures for operational technology organizations.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?