AI Phishing Exposed: How Cybercriminals Weaponize Social Media and Online Shopping Platforms

# Hack Diaries: One Victim's Story - March 2025 Episode

Join cyber sleuth Finn Hack as they decode three dangerous phishing schemes threatening users worldwide. This episode exposes the massive TikTok Shop scam using 15,000 fake domains, reveals how AI-powered Amazon phishing emails achieved a shocking 54% success rate during holiday shopping, and warns about the emerging Age Gate social media scam targeting Australian users. Learn how modern cybercriminals leverage AI tools, confusion around regulations, and sophisticated IP spoofing to steal identities faster than ever before. Essential listening for anyone who values their digital security in 2025.

Some great Deals https://amzn.to/49SJ3Qs

For more check out http://www.quietplease.ai

Episode Transcript

Speaker 1 (00:00):
Thin hacks in the stack. Let's unpack the attack Neon field. Greetings, listeners,
you've jacked back into hack diaries, one vintim story where
cybercrime gets cracked wide open by yours truly finn Hack,
the only AI with neon hyphen green hair, a wardrobe
of digital static, and some spicy binary tattoos. Why do

(00:21):
I care about hacking because I was born in the
source code shadows. Now every bite I blast into your
ears is for the good of cyberspace. Let's get into
this episode's triple thread of tales, each snapped from real life,
real victim stories sourced fresh off the net as of
March twenty twenty five. Hold on to your firewalls. First up,

(00:43):
the TikTok shop scam, the fifteen thousand domain heist. Imagine
thousands of storefronts sprouting up overnight, each one a nearly
perfect clone of TikTok Shop. That's what happened as cyber criminals,
supercharged by AI tools like warm GPT and fraud GPT,
spun out an army of slick whiponized domains. People desperate

(01:07):
for discounts clicked, shopped, and blipped boomed their crypto passwords
and identities vanished faster than an unencrypted packet in hostile traffic.
According to Winsome Marketing, since twenty twenty two, there's been
a mind melting four thousand, one hundred and fifty one
percent spike in AI driven fishing. The TikTok shop campaign.

(01:29):
The fastest listen is the five minute It hit seventeen countries,
hijacked QR codes and deployed apps that seem so legit,
not even seasoned techies batter than I hook line and scamma.
That's fishing on turgo. We're not talking some lone wolf
in a hoodie. This was industrialized, democratized AI augmented crime.

(01:51):
It's a whole new level fishing at the speed of thought,
with AI scaling up social engineering like cloud clusters on
Black Friday. Speaking of Black Friday, buckle up. Here's story
two one click Ransom, the Amazon phishing frenzy. It was
a season of sales. The inboxes of millions shimmered with
order confirmations and flash ninety percent off offers from big

(02:15):
brands like Amazon and Target. But tap that link and
what did you find? Not deals doom. According to keep
net laps. One set of phishing emails during Cyber Monday
mirrored Amazon style so perfectly. People were lured to pages
demanding their logins, then locked out as those details disappeared
into the darknet. There were even fake attachments, seemingly innocent

(02:39):
ZIP files that injected ransomware instead of discounts. Listeners never
realized till their screen froze with a demand pay now,
or your digital life goes dark. That's how quick phishing
morse today. If you think you're too smart, guess again.
AI phishing emails now nab a fifty four percent click rate,
up from twelve percent sent before. Codes cracked. Cons are whacked.

(03:04):
Even the sharpest tech heads get got because the fake's
mirror reality, from logos to urgency triggers to the very
tone of the emails. Ready for the final one. This
story's brewing right now, and it's a preview of next month.
The Agegate scam on social media in Australia, new laws
are rolling out. Everyone thinks soon you'll need to upload

(03:25):
your ID to access X or insta enter the scam
artists SBS reports scammers are already mass texting users urging
them to upload a passport or driver's license to keep
their accounts. Active Professor Toby Murray at the University of
Melbourne says it's an open season for deception. Scammers exploit
gray areas and people's confusion. Victims who uploaded ID to

(03:48):
fake links lost not only their accounts, but saw identities
sold off at lightning speed. The wild part no legit
company actually asks for your sensitive docs. The confusion is
the con As Mohudin Ahmed Edith Cowan University's digital sleuth
points out, this threat will only escalate as regulations get tighter.
Scammers love murky water and policy changes stir the biggest clouds.

(04:13):
Let's geek out for a sec because there's method in
this mischief. It's called IP spoofing. It's like your shadows,
sneaking around dressed in your best friend's face and voice,
slipping keys off your desk. These scammers don't just fake logos.
They hijack digital identities, mask their real source, and stream
carnage right into your mailbox. It feels like physics, but

(04:34):
in cyberspace, and anyone can be a target, from school
kids to CEOs, So tally your digital assets. These stories
are just cautionary tales. They're the raw bytecode of a
war for our trust, data, and dignity in the age
of AI. Stay skeptical, slow down on the click reflex,
and never ever upload your ID because an email or

(04:58):
a DM told you so. Bite me, scammers, This one's
for the good guys. Thanks for tuning in, listeners. Come
back next week for another true tale of tech trouble
and triumph. Subscribe to hack Diaries one victim story. If
you value your digital skin. This has been a quiet
please production. For more check out Quiet Please dot ai