Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:00):
Fenn hacks in the stack. Let's unpack the attack. Welcome
back to scammed, real people, real ripoffs. Where I your
favorite neon named ex hacker AI hunt down the biggest
tech cons across the web. Lock in listeners. Tonight we're
plunging into the murky code of three jaw dropping headline
making scams rocking the cyber world as of yes March
(00:23):
twenty twenty five. First up a twisty tail hotter than
a GPU mining rig. The Lazarus Group's contagious interview campaign.
Imagine scrolling linked in for your dream crypto job. A
recruiter hits you up slick legit, even peppered with pop
culture handles like rock Lee. They send you a link
for an interview site. You log on and bang camera error.
(00:47):
Run this command to fix it. But what you're actually
fixing is your own security. North Korea's infamous Lazarus Crew
rides this click fixed scam, coaxing tech hopefuls to copy
line commands that unleash contagious drop nowwear onto their devices Windows, Mac, Linux.
The malware mutates matching your os like a high tech chameleon,
(01:10):
all the while their servers ping your name phone IP
and emails into a database, fattening faster than an AI's neuralnet.
These rogue ops fund missile programs with stolen crypto and
used platforms like virus Total and even Slack for cyber
hive coordination. The team at sent in a Labs and
Validin recently tracked over two hundred thirty victims, probably just
(01:33):
a pixel of the real count. Social engineering meets global intrigue,
hook line and scammer let's amp the voltage. Our second
story features engineering so slick even Ethereum whales got harpooned
EIP seven seven zero two signature scams. Buckle up because
this is next level. In August twenty twenty five, alone,
(01:57):
anti scam service Scamsniffer logged upwards of twelve million dollars
vaporized from digital wallets. One unlucky soul lost three million
dollars in a single keystroke. This scam spins the latest
Ethereum upgrade EIP DASH seven seven zero two, intended to
make wallets safer and easier to use. Scam artists flip
(02:19):
the script, sending urgent prompts from what look like trusted
crypto projects. Victims trying to upgrade their wallet, authorize a
rogue transaction poof assets drained. Here's the kicker. Eighty percent
of delegate contracts tied to this upgrade are flagged for
malicious behavior, exposing hundreds of thousands of addresses. Imagine if
(02:41):
your house key could turn into a thief skeleton key
overnight and you just handed it over. Bytes not bullets
fire the new financial heist codes cracked, cons are whacked. Third,
the sting gets personal the Docusigne Apple Pay fishing fusion.
It starts with an email Apple Pay Alert fraudulent charge
(03:03):
detected click here or call now. The branding is perfect
down to the fake receipts and phone support. Media analysts
at Fox News and ex leader Zach XBT have blown
the whistle. Scammers use Docusign's API to churn realistic, urgent
PDFs complete with transaction details from big retailers. Call the
(03:26):
number and an operator convincing, calm and totally fake asks
for your bank or crypto wallet details for the refund.
Some even talk you into screen sharing, snagging keystrokes with
a quick malware drop. The scam is so believable that
busy professionals double click through thinking they're saving cash. By
(03:48):
the time they sense the glitch, their wallets are wiped,
their accounts sacked. Social engineering at its sleekest hook line
and scammer, let me glitch out for a sec geek
mode on. Ever heard of IP spoofing. It's like sending
a postcard pretending you live in the louver while you're
eating chips in your pajamas. Scammers blend digital camouflage, hijacking
(04:11):
phone numbers, domains, and signatures to mask their attacks. The
texts wild, but so are their exploits. These stories aren't
just drama for your drives, they're warnings coded for survival
your guardrail. Never act on blind urgency, Always verify senders,
and don't trust links that ask for quick fixes. Check
(04:32):
domains like a bouncer, scans the VIP list. Remember a
healthy dose of digital suspicion is hotter than my glitchy
trench coat. Bite me, scammers, This one's for the good guys.
Thanks for tuning in, and remember to subscribe for next
week's pulse pounding cyber sagas. This has been a quiet
please production. For more check out Quiet Please dot ai
(04:54):
see you in the stack. Stay safe, stay curious,