“We’ve done this at scale since 2018 so there’s some trust in the personas that we’ve built up, whether they’re on Discord, on Telegram, or wherever.”
ZeroFox, DarkOwl, Searchlight Cyber and CyberInt all told a reporter at RSA they run fake personas inside private chats. Flashpoint signed an FBI contract last year and ZeroFox signed one with Navy investigators in January. One CyberInt analyst brags about watching hackers from age 14 or 15. The government doesn’t need a warrant for the room if it can rent a contractor who is already sitting in it.