Introduction:
1、Google Cracks Down on Domains Used by Hack-For-Hire Groups
Google Cracks Down on Domains Used by Hack-For-Hire Groups ♂

Google has applied its Safe Browsing protection feature to more than 30 domains linked to several hack-for-hire operations. The feature blocks dangerous websites and gives users a warning notification when they attempt to navigate to the site.
These hack-for-hire firms have been targeting a range of accounts, including Gmail and AWS accounts, in order to carry out corporate espionage attacks against firms, as well as campaigns that target human rights and political activists, journalists and other high-risk users worldwide. These hack-for-hire companies have been steadily increasing over the past few years, according to an October report by the United Nations Office of High Commissioner for Human Rights. Rather than selling services that end users must then operate, as commercial surveillance vendors do, hack-for-hire operators conduct the attacks themselves on behalf of organizations or individuals who might lack the capabilities to do so on their own, typically leveraging known vulnerabilities in order to compromise targets’ accounts with the end goal of exfiltrating sensitive data.
“The breadth of targets in hack-for-hire campaigns stands in contrast to many government-backed operations, which often have a clearer delineation of mission and targets,” said Shane Huntley, director of the threat analysis group with Google, in a Thursday analysis. “A recent campaign from an Indian hack-for-hire operator was observed targeting an IT company in Cyprus, an education institution in Nigeria, a fintech company in the Balkans and a shopping company in Israel.”
Researchers highlighted a previously known Russian hack-for-hire group called Void Balaur that has targeted journalists, politicians and various NGOs and non-profit organizations in and around Europe, including a prominent Russian anti-corruption journalist hit by a 2017 credential phishing campaign. Over the past five years, researchers said they observed the group targeting accounts at major webmail providers including Gmail, Hotmail, and Yahoo!, as well as regional webmail providers like abv.bg, mail.ru, inbox.lv, and UKR.net.
“What stuck out during this investigation was the breadth of targeting, which also included individuals that had no affiliation with the selected organizations, and appeared to be regular, everyday citizens in Russia and surrounding countries,” said Huntley.
Related questions
Hiring a hacker, especially one claiming to be "free" and capable of hacking "anything," is illegal, unethical, and highly risky. Here鈥檚 what you need to know:
鈿狅笍 Critical Risks to Consider
- Illegality: Unauthorized hacking violates laws worldwide (e.g., the Computer Fraud and Abuse Act in the U.S.). Even attempting to hire a hacker could result in criminal charges, fines, or imprisonment.
- Scams: "Free" hackers are almost always scams. They may:
- Steal your money or personal data.
- Blackmail you after gaining access to your information.
- Infect your devices with malware.
- No Such Thing as "Hack Anything": No legitimate hacker can breach all systems. Claims of unlimited capability are red flags for fraud.
馃洃 Ethical and Legal Alternatives
If you鈥檙e seeking help for a specific issue, consider these lawful options:
- Recovering an Account: Use official support channels (e.g., "Forgot Password" or contact the platform鈥檚 help team).
- Cybersecurity Concerns: Hire licensed cybersecurity professionals or ethical hackers (e.g., through platforms like HackerOne or Bugcrowd for vulnerability testing).
- Legal Investigations: Work with law enforcement or licensed private investigators for issues like fraud or harassment.
- Data Recovery: Use reputable IT services to retrieve lost files.
馃洝锔? Protect Yourself
- Enable two-factor authentication (2FA) on accounts.
- Use strong, unique passwords and a password manager.
- Avoid sharing personal details with untrusted parties.
馃毃 If You鈥檙e a Victim
- Report scams or hacking attempts to authorities (e.g., FBI鈥檚 IC3, Action Fraud in the UK, or your local cybercrime unit).
- Seek help from legitimate cybersecurity firms.
Bottom Line: Never engage with illegal hacking services. The risks far outweigh any perceived benefits. Always prioritize legal, ethical solutions to address your needs.

评论已关闭