Fake attack shows how hackers could hijack our water