THE BLACK TEAM OPS HONEYPOT

Summary from the TLDR InfoSec newsletter

A SpacialSec team member posted a satirical review of a fictitious Black Team Ops certification and course that gained traction and was receiving legitimate inquiries. SpacialSec took this as an opportunity to set up a registration page for the fictitious course and use it as a honeypot to capture registration details for those who would be interested in a course that included criminal topics like SIM swapping. SpacialSec then replaced the domain with a fake FBI seizure notification and sent a fictitious message to registrants that they were subject to FBI investigation. This post includes excerpts from “support” conversations with registrants, statistics, and some funny logs.