Someone is trying to hire security researchers in a curious hacking campaign

Are you willing to scratch and take control of Chinese websites for a random person for up to $ 100,000 per month?

One makes exactly the impressive, weird and clearly labor offering. The person uses what resembles a series of fake Avatars accounts showing photos of attractive women and slide in his immediate messages several cyberspace professional and researchers on X In the past two weeks.

“We hire Webshell and teams engineers and teams to penetrate Chinese websites worldwide, with a monthly salary of up to $ 100,000. If you are interested, you can first participate in our channel,” read the message, which included a link in a telegram channel.

For some reason, I also received this message from an X account called “Look at my original page”, which had a username, @Jerellace88010, which looked like it was created by accident.

When I followed the link, I was able to see the channel manager, someone who goes under the name “Jack” and has an AI-created Avatar of a pirate.

“Are you capable of penetrating technology?” Jack asked me.

I am not, but I asked Jack to tell me more about his goals.

“Get webshells from Chinese registered areas. There is no specific target. Since the sector is registered in China, it is our goal range,” Jack said, referring tissue shellsprograms or scenarios that hackers can use to control the tissue servers. “You need to understand China’s CMS”-referring to Content Management Systems, the software that runs the web pages-“Find gaps and be able to get webshells in lots, there is no maximum of number we need.”

Yes, but critical, why?

“What I need is China’s circulation,” Jack said, maybe losing my patience with my questions.

Okay, but for what?

At this point, Jack is definitely tired of my questions and gave me a mission: to get me three tissue shells in any area that is registered in China, so I know you have the skills. In general, Jack offered me $ 100 for every scanned field.

Unfortunately, I still do not have the skills to do this, nor the willingness to break the law. Instead, I kept asking questions, including who Jack was working. “The Indian government,” Jack replied, though in a later conversation, Jack contradicts that, accusing the automatic translation, which they said they were using because the Chinese is their first language.

I talked to some of the researchers who received Jack’s strange work offer and were also concerned. No one said they had taken a malicious link, for example, or suspicious questions that would show some kind of doxing or fraud.

‘I guess it’s a troll [rather] From some serious threat actresses, “said S1r1us, a security researcher who received a DM from one of Jack’s Sockpupppet accounts in X.” If they want to hire top talent, that’s definitely not the way. “

Grugq, a well -known cyberspace expert, told TechCrunch that he has never seen anything like this recruitment campaign. ‘I have seen [people] Asking stupid questions and spamming about various things related to cyberspace, “he said.” But never as persistent, widespread, strange s- from this guy. “

According to Grugq, perhaps the goal is to infect people in China with malicious software, as it makes no sense to use Chinese areas to start attacks DDOS or unwanted messages, because this would not justify high payment.

“I can’t really think of the WTF they are doing,” Grrugq concluded. “It doesn’t make sense.”

And no one else, obviously. Godspeed, Jack, in any adventure you start.