Hello. Hackers are combing social media apps for workers who post about layoffs, pay gripes and unfair treatment, or those who were recently fired, demoted or passed over for a promotion.

The workers are typically offered a share of ransomware payoffs or stolen data sales for their services, WSJ Pro's Angus Loten reports. Read our full story. 

Also today: 

• Two red-teamers awarded $600,000 in wrongful arrest case
• Krispy Kreme to settle breach case for $1.6 million

• Further reading from WSJ Pro: Cyberattack Snarls Krispy Kreme’s Online Ordering

Two security professionals are due to receive $600,000 as a settlement in a wrongful arrest case stemming from a penetration-testing job in 2019. Gary DeMercurio and Justin Wynn, former employees of cyber company Coalfire Labs, were hired to test the security systems of Iowa's Judicial Branch using red-teaming techniques and physical break-ins.

• They were arrested, spent about 20 hours in jail and bonded out. Charges were later reduced to misdemeanor trespassing. (ArsTechnica)

• The Iowa court's investigation report on the incident and recommendations for avoiding such "confusion" in the future is good reading. 

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle . Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.