Ian Ahl from Permiso's P\xd8 Labs joins Dave to discuss their research on "Unmasking GUI-Vil: Financially Motivated Cloud Threat Actor." First observing the group in 2021, they discovered GUI-vil is a financially motivated threat group primarily focused on unauthorized cryptocurrency mining activities.\nThe research states "the group has been observed exploiting Amazon Web Services (AWS) EC2 instances to facilitate their illicit crypto mining operations." This group is dangerous because unlike many groups focused on crypto mining, GUI-Vil apply a personal touch when establishing a foothold in an environment.\nThe research can be found here:\nUnmasking GUI-Vil: Financially Motivated Cloud Threat Actor\n\nLearn more about your ad choices. Visit megaphone.fm/adchoices