A bizarre job offer is making the rounds on the social media platform X, where a mysterious individual is offering cybersecurity professionals up to $100,000 a month to hack Chinese websites. The offer, which has been sent to several researchers and cybersecurity experts, promises a lucrative monthly salary in exchange for penetrating Chinese websites worldwide.
The job offer, which includes a link to a Telegram channel, is being made by an individual who goes by the name "Jack" and uses an AI-generated avatar of a pirate. Jack claims to be looking for "webshell engineers and teams" to obtain web shells from Chinese-registered domains, with no specific target in mind. Web shells are programs or scripts that hackers can use to control hacked web servers.
When asked about the goals behind the job offer, Jack revealed that they are looking to obtain "China's traffic," but failed to provide further clarification. The true motives behind the job offer remain unclear, with some experts speculating that it could be a scam or a troll. "I am guessing it's a troll rather than some serious threat actor," said s1r1us, a security researcher who received the job offer.
The Grugq, a well-known cybersecurity expert, told TechCrunch that he has never seen anything like this recruiting campaign. "I have seen [people] asking dumb questions and spamming for various cyber security related things," he said. "But never anything like the persistent, widespread, bizarre shit from this guy." The Grugq suggested that the goal may be to infect people inside China with malware, but this theory remains speculative.
Despite the unclear motives, the job offer has raised eyebrows in the cybersecurity community. The offer of $100,000 a month is unusually high, and the lack of specificity about the target or goals is suspicious. "If they want to hire top talent, this is not definitely the way," said s1r1us.
The incident highlights the importance of vigilance in the cybersecurity community. With the rise of cyber attacks and data breaches, it is crucial for cybersecurity professionals to be cautious when approached with job offers or requests that seem too good to be true. As The Grugq concluded, "I really can't think of wtf they're doing. It makes no sense."
For now, the true identity and motives behind "Jack" remain a mystery. As the cybersecurity community continues to investigate and speculate, one thing is clear: this job offer is a reminder to always be on guard against suspicious activity and to never compromise on security.