The Global Scam Battle

Cybercrime continues to evolve in sophistication and scale, with attackers running their operations much like businesses. From ransomware gangs with customer support desks to AI-generated phishing campaigns that erase traditional red flags, scams are becoming harder to detect and stop.

In this episode, David Bittner, host of the CyberWire Daily Podcast, shares his perspective on the changing landscape of fraud and cyberattacks. Drawing on his background in media, theater, and podcasting, as well as years of reporting on security issues, he explains how both criminals and defenders are using AI, why ransomware has exploded instead of fading, and how scams exploit human trust and expectations..

David also talks about common scams hitting people today, from toll violation texts and fake bank calls to romance scams on social media. He recounts personal experiences of being targeted, including a Facebook credential-harvesting attempt and an exit-ramp "out of gas" con, to show that no one is immune. Looking ahead, he predicts existing scams will keep evolving, AI will continue to raise the stakes, and defenders may eventually need AI "agents" watching out for them in real time.

Show Notes:

• [02:00] David explains how CyberWire grew from a daily news brief into a full podcast network covering cybersecurity.
• [04:21] David recalls his background in media, theater, and early computer culture that shaped his path.
• [05:52] We hear how luck, timing, and technical skills combined to make podcasting a success for him.
• [07:17] David shares why he believes AI is the biggest change to cybersecurity in the past decade.
• [08:00] He notes that bad grammar is no longer a reliable phishing red flag thanks to large language models.
• [10:11] We discuss how phishing awareness training must adapt to more convincing scams.
• [12:30] He reflects on the unexpected rise of ransomware compared to early predictions about cryptomining.
• [14:08] David explains how ransomware groups now operate like corporations with support teams.
• [16:00] He raises concerns about ransom payments funding overseas criminal networks in Russia and North Korea.
• [18:15] We learn how scammers use call centers and human trafficking to scale their operations.
• [19:30] David describes current scam trends, including fake toll violation texts and AWS account alerts.
• [21:32] He points out how romance scams thrive on social media platforms like Facebook.
• [22:16] David recounts a frightening call where his mother was nearly scammed by criminals posing as bank security.
• [25:09] He emphasizes how scammers manipulate victims to stay locked into the story and ignore warnings.
• [26:03] We hear how criminals pressure victims into withdrawing cash, buying gold, or handing funds to unwitting couriers.
• [27:00] David shares a case where a delivery driver was tragically killed after being caught up in a scam pickup.
• [29:00] He talks about his own experiences of being scammed, including a Facebook credential-harvesting attempt.
• [32:08] David recalls falling for an "out of gas" roadside con and explains why he still prefers trusting people.
• [34:00] He reflects on how vague scam messages exploit imagination and insecurities.
• [36:08] We hear examples of scams that exploit real-life contexts, such as HR benefits or package deliveries.
• [37:45] David explains his current vigilance with real estate transactions and wire transfer fraud.
• [39:26] He predicts the next wave of scams will be evolutions of what already works, boosted by AI.
• [40:07] David outlines the persistence of "treasure box" and inheritance scams dating back hundreds of years.
• [41:02] He shares his hope that future AI "agents" will act as a safeguard for vulnerable users.
• [42:21] David speculates about "nuisance ransomware" that charges small amounts to fly under the radar.
• [43:25] He jokes about calling it "inconvenienceware" and wonders if such a niche could emerge.