"Cute, quick little PSA to all my security friends out there. Krebs On Security reports that Iris C2, an offensive cybersecurity startup out in Virginia, is linked to convicted fraudsters Jacob Wohl and Jack Berkman. Yep, those guys. Looks like those massive bounty payouts might be too good to be true after all. Through public records, Krebs was able to link the startup Iris C2 to a Virginia-based entity called Calvexa Group LLC. The corporate registration address for Calvexa Group LLC belongs directly to Jack Berkman. And when Krebs reached out for comment, Berkman forwarded all questions to his longtime partner in crime, Jacob Wohl. In a subsequent phone interview, Wohl explicitly admitted his involvement, bragging that while he has no formal education or background in tech, he knows more about tech than anyone. And I'm the queen of England. On ex-Twitter and LinkedIn, Iris C2 markets itself as a high-end Virginia-based offensive cybersecurity startup. They are aggressively hunting for talent by targeting junior exploit developers and high IQ researchers with no formal degrees. Their stated business model is buying up highly coveted zero-day exploits. One-patch software vulnerabilities and full exploit chains, dangling massive payouts ranging from $10,000 to $7,000, million to attract researchers. Bottom line? Do not trust them. Their rap sheets are long and bizarre."