What if the attacker is already in the system, and using this announcement as a probe for response and as an opportunity to harvest more info? (ie announce ser

What if the attacker is already in the system, and using this announcement as a probe for response and as an opportunity to harvest more info? (ie announce server x is going to get attacked, and stand back while logged into server y and monitor where/who the increased security presence and attention is coming from, and use that to target the next sigint / humint attack)