A pro-Russian hacker group, known as TwoNet, recently boasted about a cyberattack on a Dutch water facility, which was later revealed to be a breach of a decoy system set up by cybersecurity researchers. The group, which emerged in early 2025, has escalated from DDoS attacks to targeting industrial control systems but demonstrated a lack of understanding of their operations. This incident reflects a disturbing trend of inexperienced hacktivists targeting critical infrastructure, a concern echoed by researchers who note that such actions may lead to real-world consequences. The ongoing vulnerability of utilities, particularly in the energy and water sectors, raises significant security implications, emphasizing the need for robust cybersecurity measures in critical infrastructure to counteract potential threats.