Congrats, cybercrims: You just fell into a honeypot

Resecurity's threat-intel team set a honeytrap with synthetic employee records and transaction data that succeeded in attracting Scattered Lapsus$ Hunters; the actor logged into the emulated application, later claimed to have stolen Resecurity data, but the data were fake. Processing the synthetic data caused OPSEC mistakes that exposed attacker servers and IP addresses, leading a partner foreign law enforcement agency to issue a subpoena and the attackers to remove their public claims.