I always thought that people hired to pen test are white hat hackers? What is the difference to red team?

No, they just put it as background music in their videos, but didn’t actually pay for it. I would guess it constitutes fair use?