Never gonna give you up, never gonna take this call.

Key takeaways

Misinformation about gas pump scams circulating on social media is unsubstantiated; it is a hoax with no verified evidence.
A sophisticated cyber scam campaign by North Korean hackers targets tech workers with fake job interviews and malware, primarily aiming to steal passwords and cryptocurrencies.
Maryland has enacted a law allowing financial institutions to pause suspicious transactions involving seniors or vulnerable adults, providing a new layer of protection against financial scams.
Scammers impersonate high-profile individuals, like Prince Andrew, in elaborate cons, showcasing the bizarre and humorous extremes of social engineering frauds.
Always verify suspicious stories, especially those circulating on social media, with trusted sources like Snopes or official agencies before spreading or acting on them.

Summary

listener-submitted scam trick and humorous banter

The hosts review a listener's tip on how to divert unsolicited calls using GSM codes, often resulting in playful and humorous banter about call diverting and pranks, such as using the Rickroll hotline. They also joke about launching a chicken-themed podcast and discuss a physics-based cooling paint used in chicken coops, emphasizing discussions with a light, humorous tone.

North Korean hiring scam exposed

Maria Vermazis reports on a sophisticated scam involving North Korean hackers targeting tech workers through fake job interviews and freelance recruiters in several countries. The campaign, called Contagious Interview, uses real freelancers and malware-laced coding exercises to steal passwords and cryptocurrency. The scammers hire freelancers to conduct fake interviews, which then serve as vectors for malware. The hackers appear to target higher-value assets like crypto, and the scheme involves high proficiency in coding. Researchers from Google and other groups track this as a North Korean threat cluster, indicating government-backed cybercrime aimed at financial gains, especially via cryptocurrency theft.

Viral gas pump screw hoax debunked and social media misinformation

Joe Carrigan discusses a viral rumor circulated on social media, including police Facebook pages, claiming criminals insert screws into fuel pump nozzles to steal fuel. Snopes and official investigations have found no evidence of such schemes. The story likely originated from TikTok videos that exaggerated or fabricated the scam, with some signs of AI-assisted editing. The hosts highlight the importance of verifying such claims and not spreading misinformation, emphasizing that authorities have debunked the scam as a hoax.

Maryland law to protect seniors from financial exploitation

Joe Carrigan covers a new Maryland law allowing banks and credit unions to temporarily halt suspicious transactions involving seniors (65+) or vulnerable adults, giving a 15- or 25-day hold for review. The law also permits trusted contacts to be notified to help prevent financial scams, including romance scams. The hosts discuss potential concerns about delays in access to funds and the importance of data analytics to monitor such interventions. Overall, the law aims to better protect older adults from financial abuse, with positive outlooks on its implementation and effectiveness.

Catch of the Day: Fake Prince Andrew scam

The hosts share a humorous and bizarre scam where scammers impersonate Prince Andrew, engaging in fake conversations involving blood-drinking and royal memberships. The scam involves questions about personal details and fake affiliations with the royal family, illustrating the absurd lengths scammers go to deceive victims. The story is popular on Reddit, with comments noting the bizarre choice of impersonation, highlighting how scammers often pick high-profile figures for their scams.

Show notes

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. This week, we have follow up on a listener-submitted trick for diverting unwanted calls to a different number, including the famous Rickroll hotline, along with a discussion about whether Joe should launch a podcast dedicated entirely to the trials and tribulations of raising backyard chickens. Maria has the story of a journalist who infiltrated a sophisticated North Korean hiring scam that uses fake job interviews, real freelance recruiters, and malware-laced coding tests to steal passwords and cryptocurrency. Dave’s got a viral gas station scam warning involving screws placed in fuel pumps, and why investigators found no evidence that the alleged scheme is actually happening. Joe’s first story is on a new Maryland law that gives banks and credit unions the authority to temporarily pause suspicious transactions in an effort to better protect customers from fraud and financial exploitation. On this week's Catch of the Day, a scammer serves up a blood-curdling tale involving "Dr. Prince Andrew" and a very questionable beverage choice.

Resources and links to stories:

I Made The World's First Self-Cooling Clothes

Cools Surfaces Up To 15°F Below The Air Temperature

I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics

Gas pump 'screw method' scam warning is a hoax

Maryland law gives banks and credit unions power to pause suspicious transactions

Longevity Ready Maryland, Fraud Protections, Support for Caregivers Among Wins for Older Marylanders

Dr. Prince Andrew admits to drinking blood "occasionally"

⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Have a Catch of the Day you'd like to share? Email it to us at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠hackinghumans@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.