Hacking Humans
Scamazon prime.
· Summarized
Key takeaways
- Many online scams are actively harvesting personal information, and consumers should be cautious about participating in contests or sign-up schemes promising quick rewards.
- Law enforcement agencies are making significant strides in combating international cybercrime, seizing millions in cryptocurrency and arresting key figures behind illicit marketplaces but these groups often continue to evolve and operate in new venues.
- QR code scams continue to grow, with malicious codes placed in public spaces designed to trick users into phishing or malware sites. Users are advised to avoid scanning suspicious codes and verify sources.
- TikTok rental scams are prevalent, with fake listings featuring stolen photos, low prices, and new accounts as red flags. Always verify listings through reputable sources.
- Social media platforms like Meta are struggling to prevent the distribution of child exploitation materials and AI-generated abusive content, revealing gaps in moderation and security that need addressing.
Summary
Follow-Up and Community Feedback on Social Engineering & Scam Tactics
The episode begins with hosts addressing a listener named Gordy who expressed concerns about a questionable contest at a fairground collecting personal information in exchange for a prize. The hosts discuss the typical motives behind such setups — mainly to harvest data for marketing or malicious purposes — and advise against providing personal info to these questionable schemes. The discussion also touches on Joe’s humorous backpack modification and the concept of decoy or distractive tactics in social engineering, illustrating how scammers bait victims.
Update on Illicit Cryptocurrency Marketplaces and Law Enforcement Actions
The hosts discuss the U.S. Department of Justice's recent crackdown on Xinbi Guarantee, an illicit online marketplace that facilitated scam services such as money laundering, fake investment websites, and trafficking victims. Seized assets include $52 million in cryptocurrency, spread across multiple wallets, with operations believed to be run by Chinese crime syndicates based in Madagascar. The episode highlights that law enforcement successfully interdicted some of the financial flow and arrested key personnel, demonstrating significant progress but also acknowledging the persistent nature of these criminal networks.
Emerging Risks in Social Media and Scamming—QR Codes, TikTok Rental Scams, and Child Exploitation Ads
Maria reviews recent warnings from the FTC about malicious QR codes being positioned on parking meters and other public spaces, leading to phishing sites. She expresses frustration over the ongoing nuisance and danger of QR scams. She then delves into a detailed report by C&C Intelligence about a surge in rental scams on TikTok, where fraudulent listings often mimic legitimate properties using stolen images and offer unrealistically low prices. The report discusses scam indicators such as new, unverified accounts, inconsistent listing details, and suspiciously low prices, emphasizing the need for caution and verification.
Meta’s Role in Child Exploitation Online and AI-Abuse Content Distribution
The scene shifts to a report by Wired about Meta’s social media platform failing to prevent hundreds of ads containing child sexual abuse material (CSAM) and AI-generated abusive content. Researchers found that malicious ads used real images of children and were designed to evade detection, with some ads remaining active despite reports. The discussion highlights the ongoing challenge social platforms face in moderating harmful content, the exploitative use of AI tools to generate or distribute abusive images, and the need for stronger safeguards and legislative measures.
Sponsors
- Threat Locker · AI coding agents are writing code and reaching outside systems, often without human approval. Threat Locker helps fix it, giving every AI agent only the access it needs, controlling what it can run, touch, and reach on your network. Threat Locker offers ready to deploy policies for popular agentic AI tools. Learn more during our next break.
Show notes
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up from Gordy, who has questions about a fairground contest collecting personal information, plus an update on Joe’s backpack. Joe covers the takedown of Xinbi Guarantee, an illicit marketplace allegedly providing services to scam centers, including money laundering, fake investment sites, and other tools for fraud. Maria looks at QR-code scams and a growing wave of rental scams on TikTok, where fake listings use stolen property photos, below-market prices, and upfront fees to target prospective renters. Dave explores a report on how hundreds of ads promoting AI “nudify” tools and other abusive content were able to reach users through Meta’s advertising system. Our Catch of the Day comes from Tim, who received a suspicious board-position offer that appears to have scraped details directly from his LinkedIn profile—and somehow offered him a seat on the board of his own company.
Resources and links to stories:
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
See a QR code parked somewhere? Don’t scan it…yet!
68% of TikTok rental listings carry scam warning signs
Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids
Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@n2k.com.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account