165. Mic Drop: FIN7 is hiring

165. 麦克风掉落:FIN7 正在招聘

Click Here

科技

2024-09-13

13 分钟
PDF

单集简介 ...

The Russian-speaking cyber gang, FIN7, has fooled red team hackers into doing their dirty work by masquerading as legitimate cybersecurity companies just looking for talent. Silent Push’s Zach Edwards talks about the scam.
更多

单集文稿 ...

  • Yeah, I've got quite a few skateboards back there, actually.

  • Not sure if you can see them.

  • All, but on the wall behind Zach Edwards are a bunch of skateboard shapes, all laminated wood with colorful designs that I can't quite make out, but the sheer number of them is impressive.

  • I used to be a big rollerblader and skateboarder.

  • I had, like, a quarter pipe in my backyard and a grind box I'd built.

  • I was always off doing troublesome things.

  • So.

  • These days, Zach Edwards spends most of his time tracking other people who do troublesome things.

  • He's a senior threat researcher at a cybersecurity company called Silent Push, and his specialty is advanced persistent threat actors, the people in cyberspace who are always looking for a new angle to exploit.

  • Typically, there are hackers who've been around for a while, groups like Fin Seven, which we focused on in Tuesday's episode.

  • What we wanted to look at today was this wild thing that Zach discovered fin seven was doing on the side.

  • They started recruiting legitimate red team hackers.

  • They'd lead them to believe that they were working for a legit company, when in fact, they'd be helping a notorious ransomware gang find vulnerabilities in a network.

  • They went through some sort of hiring process, and then they basically said, hey, here's the three or four clients of ours that we're working with to try and get into their systems.

  • That's genius.

  • It's absolutely.

  • It's Mark Twain getting someone to paint the fence for you.

  • And those people probably didn't even get paid.

  • I'm Dena Templerest, and this is click.

  • Here's mic drop, an extended cut of an interview we think you'd like to hear more of.