Resecurity Traps Hackers in Honeypot After Breach Claim

Cybersecurity firm Resecurity revealed that a notorious hacking collective known as Scattered Lapsus Hunters fell into a deliberately set honeypot after claiming to have breached the company's systems and stolen sensitive data. The incident, which unfolded in late December 2025 and early January 2026, exposed the attackers' infrastructure and methods without compromising any real information, according to Resecurity.

The group, which announced its supposed success on Telegram, stated it had gained full access to Resecurity's internal systems. In a post dated January 3, the actors shared screenshots purporting to show backend dashboards, user profiles, internal chat logs from a Mattermost collaboration tool, employee records, client lists, and threat intelligence files. They described the breach as retaliation for Resecurity's prior efforts to infiltrate dark web forums by posing as potential buyers of stolen data, including during a sale of a Vietnam financial system database.

Resecurity quickly denied the claims, asserting that the intruders had interacted only with a controlled decoy environment populated with synthetic data. In a blog post published on December 24, 2025, the...