https://www.bleepingcomputer.com/news/security/fin7-tries-to-trick-pentesters-into-launching-ransomware-attacks/

The FIN7 hacking group is attempting to join the highly profitable ransomware space by creating fake cybersecurity companies that conduct network attacks under the guise of pentesting.

FIN7 (aka 'Carbanak') has been involved in cyberattacks and money-stealing campaigns since 2015 when they first appeared in the cybercrime space, including infecting ATMs with MITM-enabling malware.