I wonder if it's possible to "sabotage" my own internet to get this effect? If it is then we'll have to come up with some countermeasures.
It's easier to kill moonwalking enemies than if their position updates normally. Damage calculation is client side, so if my client sees them where they actually aren't and I hit them on my screen, the server accepts it as valid.