Prosecutors say Andrii Kolpakov posed as a legitimate, high-level penetration tester as part of the FIN7 group’s crime spree, which included the theft of 15 million payment card numbers.