Know What's Happening in SaaS

Resecurity Says Security Breach Was Nothing More than Hackers Duped by a Honeypot

Resecurity disclosed that a recent breach claim was a honeypot trap, not a genuine data loss. The Scattered Lapsus$ Hunters (SLH) group boasted access to internal systems, but only interacted with synthetic accounts populated with fake consumer and payment records. Real employee data, client information, and production environments remained untouched. Resecurity’s DFIR team logged attacker IPs, used honeytrap Office 365 and VPN accounts, and shared the evidence with law enforcement.