Another FIN7 podcast drop on the CLICK HERE series by The Record from Recorded Future News with Silent Push Senior Threat Researcher Zach Edwards. Check it out, it’s a great listen 🎧
Happy Friday! The Record from Recorded Future News' Click Here podcast just dropped another episode from my interview with them -- this is from their "Mic Drop" series with the title "FIN7 is hiring." Listen to the newest episode @ https://lnkd.in/gvzzXAFe ICYMI, our team at Silent Push first spoke about the FIN7 / Sangria Tempest "cybersecurity shell company" on our blog post from a few months ago @ https://lnkd.in/g-zKg55Z The FIN7 site where they may be trying to *currently* recruit folks in the cybersecurity community is cybercloudsec[.]com -- this site was live for months seeing regularly updates, then ~last week it went down for days, but then suddenly went back online this week. This current effort aligns to a similar scheme that FIN7 operators have launched twice before -- there was a fake security companies in 2021 called "Bastion Secure" and in the mid 2010's FIN7 operated another called "Combi Security." These past fake security companies were used to recruit red team operators for penetration tests against organizations FIN7 wanted to target. You can read more about the 2021 effort around this @ https://lnkd.in/gmkK39MX FIN7 is the preeminent cyber threat group to use fake companies for hiring unsuspecting collaborators. Keep your eye out for more from them, it appears they aren't stopping anytime soon! </mic drop>