A job description that appeared to describe the activities of the Dark Basin hackers was shared by a group of hackers to test their phishing kit, as investigative journalists tracked URL shorteners used by the hackers.