FIN7, a financially motivated threat group, has set up a fake security company to recruit talent, researchers say. The group advertised job openings for a fake company called Bastion Secure on Russian job portals. The aim of the scam, it adds, was to lure security researchers who could help the group with penetration testing-related activities to enable ransomware attacks. In the past, the FIN7 group has carried out similar scams in the U.S. In 2018, its fake company Combi Security was brought to light by prosecutors who believed it was an attempt “to add a thin veil of legitimacy to the hacking scheme””]
Source: https://www.cuinfosecurity.com/fin7-sets-up-fake-pentesting-company-site-to-recruit-talent-a-17783