Defending against cyberattacks by giving attackers ‘false hope’