You're listening to the CyberWire Network, powered by N2K.

When it comes to ensuring your company has top-notch security practices, things can get complicated fast.

Vanta automates compliance for SOC2, ISO 2701, HIPAA and more, saving you time and money.

With Vanta you can streamline security reviews by automating questionnaires and

demonstrating your security posture with a customer-facing trust center.

Over 7,000 global companies like Atlassian, Flow Health, and Quora use Vanta to manage risk and prove security

in real time.

Our listeners can claim a special offer of $1,000 off Vanta at vanta.com slash cyber.

That's VANTA.com slash cyber for $1,000 off Banta. Hello, Hello everyone and welcome to the CyberWire's Research Saturday.

I'm Dave Bitner and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

Thanks for joining us. It looks like the threat actors put their lure out.

It looks like the threat actors put their lure out.

We're looking for some dev, you know, perhaps some financial

incentive, you know, listed in the job offer, you know, in that case they would kind of go back and

forth with the potential interviewee or victim at this point

and then establish a relationship and then conduct the interview.

The whole thing behind this is that this isn't unusual.

You know, everything that they're doing is pretty in line

with a typical, I guess you could call practical interview. That's Tim Peck, senior threat researcher at Securonics.

The research we're discussing today is titled,

Threat Actors Behind the Dev Popper campaign have retooled

...