I had also posted this story earlier, then deleted it once I learned that. However, I did find this interesting doc about real ADS-B spoofing, which does not appear to be very easy:

https://www.icao.int/sites/default/files/APAC/Meetings/2025/...