<story><title>How does one get hired by a top cybercrime gang?</title><url>https://krebsonsecurity.com/2021/06/how-does-one-get-hired-by-a-top-cybercrime-gang/</url></story><parent_chain></parent_chain><comment><author>ackbar03</author><text>Wait hang on, that cliff hanger though&lt;p&gt;&amp;gt;&amp;quot;Multiple security experts quickly zeroed in on how investigators were able to retrieve the funds, which did not represent the total amount Colonial paid (~$4.4 million): The amount seized was roughly what a top DarkSide affiliate would have earned for scoring the initial malware infection that precipitated the ransomware incident.&amp;quot;&lt;p&gt;I&amp;#x27;m not quite sure what this implies? That the team who did the initial infection was in fact some sort of FBI undercover?&lt;p&gt;So undercover FBI successfully hacked colonial pipeline, ignited all this press coverage and attention, and quietly disappeared with the ransom amount? Am I interpreting that correctly?</text></comment>
<story><title>How does one get hired by a top cybercrime gang?</title><url>https://krebsonsecurity.com/2021/06/how-does-one-get-hired-by-a-top-cybercrime-gang/</url></story><parent_chain></parent_chain><comment><author>great_reversal</author><text>Getting hired is just applying to another job posting. The interview process is two-step, with a project-based technical component. The job itself is also two-step: first year is similar to contract work, with good employees brought into the fold not long after.&lt;p&gt;It looks like DOJ is trying to make an example out of some lowly frontend&amp;#x2F;freelance developer. Her work includes:&lt;p&gt;- creating a &amp;quot;web panel used to access victim data stored in a database&amp;quot;&lt;p&gt;- added a feature that &amp;quot;showed an infected computer or ‘bot’ status in different colors based on the colors of a traffic light&amp;quot;&lt;p&gt;- added a feature that &amp;quot;allowed other Trickbot Group members to know when their co-conspirators were working on a particular infected machine&amp;quot;&lt;p&gt;One thing DOJ accuses her of is &amp;quot;developing tools and protocols for the storage of credentials stolen and exfiltrated from victims infected by Trickbot.&amp;quot; But its pretty obvious they don&amp;#x27;t know what &amp;quot;frontend developer&amp;quot; even means.</text></comment>