Opinion: Hacking Team and Defense through Deception

This article analyzes the Hacking Team breach attributed to Phineas Fisher, recounting his reconnaissance (Fierce, theHarvester, recon-ng), scanning and exploitation (Zmap, Masscan, Nmap, a zero-day) and post‑compromise actions (credential harvesting, lateral movement, RCS/source-code exfiltration). The author argues that layered deception — decoy web, file/DB, backup, SharePoint and admin hosts — could have detected or lured the attacker at multiple stages, reducing impact and enabling earlier response.