Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:00):
Thin hacks in a stack. Let's unpack the attack. Welcome
listeners to scam chronicles a new mark every week. I'm
fin hack your neon haired, trench coated guardian of the glitch,
and this week's bite sized stories will have your circuits sizzling.
Our first payload job seekers in the crypto bisbee ware.
The Lazarus group from North Korea is rolling out the
(00:21):
legendary clickfixed scam. They're not just crafting fake interviews, they're
engineering nowware installs with surgical precision. Picture this. You land
a dream interview at a top crypto firm like Robin
Hood or e Toro. Suddenly you hit a fake camera
error and are told to copy paste mysterious commands to
fix the issue. Bam, you just gave the bad guys
(00:42):
your system on a silver platter. Sentinel Labs in Valadin's
March twenty twenty five research revealed these hackers aren't sloppy.
They use legit cybersecurity platforms to monitor detection with opec
seglunders that left traces of their tactics. Between January and
March hundredsz Felvic them real jobs, fake interviews and malware
(01:03):
shaped to sniff out your operating system like a bloodhound.
Social engineering at its most sinister. Remember listeners, codes cracked,
cons are racked. Always double check before typing strange commands
in a virtual interview, especially if they're promising you crypto riches.
The real gold is in your caution. Story two hook
line and scammer phishing summer twenty twenty five style went
(01:26):
viral on social TikTok and Facebook feeds, flooded with deals
too good to be true. Singapore Police Force reported over
one thoy nine hundred cases in the first half of
twenty twenty five alone, three dollars and one cent loss
just on social media ads the game. You see a
heavily discounted transport card or mouthwatering food deal, click through
(01:49):
and hand your card details away for authentication. Suddenly your
credentials unlock Apple pay, Google Pay, or get siphoned into
mobile wallets only the scammer's control. They use your real
details to top up and transact like pros, sometimes even
calling and posing as government officials, convincing you to verify
details over the phone. It's IP spoothing. Imagine a scammer
(02:12):
hiding in a crowd, wearing your favorite band, tea and
singing your theme song. Always confirm with trusted sources, never
links sent direct, because when it comes to digital deals,
you gotta bite me scammers. This one's for the good guys.
Let's ride into our third case, straight from Baltimore's Playbook
of financial fiasco. According to Mimecast, in early twenty twenty five,
(02:37):
a fraudster breached city systems by impersonating a vendor, reaseling
their way into the city's workday account, and slyly swapping
bank infull for payments. Two payments slid to the scammer's account,
totaling over one dollar and five cents. Sure, some was recovered,
but a whopping eight hundred and three thousand dollars vanished.
(02:57):
The catch accounts payable staff miss the red flags, no
step up authentication, no document cross checks, Just click approve
and go. This my knee Unlaced Friends is classic BC
business email compromise. Think of it like a hack inside
a hack, a matroshka doll of cons If your city
(03:19):
can get hit soa can you secure those approvals, audit
those steps, and train your teams with digital street smarts.
Each week, a new mark, a fresh scam and one
big lesson. Our firewalls may be code, but our real
shield is awareness. So whether you're a marketer in crypto,
a hungry shopper scrolling feeds, or a city worker reviewing invoices,
(03:44):
remember Finn's gospel. Trust is good. Verification is vital before
you drop off the grid. Thank you for tuning in
to Scam Chronicles a new mark every week. Come back
next time for more pulse pounding tales of digital deception
and high tech heroics. Subscribe wherever you listen and lock
in your cybersecurity wisdom. This has been a quiet please production.
(04:08):
For more check out Quiet Please dot ai Bite me scammers.
This one's for the good guys.