Convicted Felons Jack Burkman and Jacob Wohl Launch Zero-Day Exploit Startup IRIS C2

IRIS C2, a cybersecurity startup offering payouts up to $7 million for zero-day software exploits, is operated by convicted felons Jack Burkman and Jacob Wohl. According to reporting from KrebsOnSecurity, the Virginia-based company is run via Calvexa Group LLC and is led by individuals with a history of fraud and the creation of fake intelligence firms to target public figures.

The company uses its website and an X account created in January 2025 to recruit vulnerability researchers. IRIS C2 claims to acquire zero-day exploits—previously unknown software vulnerabilities that can be used for attacks—and other offensive capabilities across major platforms. The company states that payouts for these exploits range from $10,000 to $7 million, depending on the target and reliability of the code.

A pinned post on the IRIS C2 X account describes a business model focused on attracting junior engineers with raw talent and high intelligence, regardless of whether they hold a college degree or industry experience.

Calvexa Group and Federal Contracting Claims

The government contracting portal g2exchange.com identifies Calvexa Group LLC as the operator of the irisc2[.]com domain. While Calvexa Group LLC is registered as a federal contractor, G2Exchange records indicate the firm does not appear to be working on any direct government contracts.

In an interview with KrebsOnSecurity, Jacob Wohl claimed that IRIS C2 shifted its focus to selling phone-hacking services to the government. When asked for specifics regarding these federal contracts, Wohl stated he was not at liberty to speak publicly about them.

Wohl also claimed the company employs approximately 40 people, though he noted that employees are forbidden from listing their employment on LinkedIn for operational security reasons.

Criminal History of Burkman and Wohl

Jack Burkman and Jacob Wohl have a documented history of using fabricated intelligence companies to spread false claims. According to court and public records, the pair previously fabricated sexual assault allegations against former FBI Director Robert Mueller and former South Bend Mayor Pete Buttigieg. In 2019, they held press conferences making false claims about Sen. Elizabeth Warren and Kamala Harris.

The duo faced legal consequences following the 2020 presidential election for orchestrating a robocall scheme in battleground states to suppress the Black vote in Detroit. In 2022, both pleaded guilty to a felony charge of telecommunications fraud in Ohio and were sentenced to probation, fines, and community service.

Further legal actions against the pair include:

• A March 2023 New York civil case ruling that they violated federal and state civil rights laws, resulting in a $1 million settlement.
• A $5.1 million fine imposed by the Federal Communications Commission in June 2023 for their robocall campaigns.
• A 2017 action by the Arizona Corporation Commission, which charged Wohl with 14 counts of securities fraud and ordered $35,000 in restitution.
• A 2019 guilty plea in California by Wohl to four felony counts of selling unregistered securities.

Pattern of Pseudonyms and Deception

The operation of IRIS C2 follows a pattern of using assumed identities to run businesses. Politico reported in September 2024 that Burkman and Wohl operated a now-defunct AI lobbying platform called LobbyMatic using the pseudonyms Bill Sanders and Jay Klein. Politico found that some employees resigned only after discovering the founders’ true identities.

Wohl, who lacks formal education or training in computer science or information security, told KrebsOnSecurity that he is self-taught.

I know more about tech than anyone. My background has always been extremely technical, and I’ve always been deeply into tech. People know me as someone who is able to create spectacularly exquisite capabilities that would make your head spin.

Jacob Wohl to KrebsOnSecurity

Additional reports indicate the pair’s continued involvement in high-stakes legal maneuvering. A March 31 report by journalist Molly White stated that Burkman and Wohl received a $300,000 retainer from a Canadian cryptocurrency fraudster. The individual, wanted by the U.S. for allegedly stealing $65 million from KyberSwap and Indexed Finance, reportedly hired the pair to seek a presidential pardon.