Hacking Humans

Caught on ScamTok

· Summarized

Share this episode
Anyone with this link can open it.
Share Link
Start at 0:00

Key takeaways

  • Always be cautious of unsolicited emails claiming to offer free account verification; verify through official channels.
  • Use resources like the BBB Scam Tracker heat map to stay informed about regional scam activity and trends.
  • Large-scale international law enforcement operations, such as Interpol's First Light, can significantly disrupt scam networks, but the overall threat remains substantial due to the vast volume of untracked scams.
  • scams can be run by poorly skilled operators using volume tactics, making engagement with such scam accounts potentially humorous or revealing of their ineptitude.
  • Remaining skeptical and verifying identities and offers can help prevent falling victim to social engineering scams, online frauds, and impersonations.

Summary

Social Engineering and Phishing Campaigns

The hosts discuss a recent phishing scam where attackers used convincingly legitimate-looking Facebook emails to trick users into revealing their account credentials. The scam involved fake verification offers, chatbot interactions, and attempts to steal identity documents like passports and driver's licenses. The story highlights how scammers use interactive, real-looking tactics to enhance their deception and emphasizes the importance of skepticism around such unsolicited requests, especially those promising free verification services which are typically paid by Facebook.

Tools for Tracking Scam Trends

Joe introduces a resource from the Better Business Bureau called the Scam Tracker heat map, which visualizes reported scam data across states. The tool provides insights into regional scam activity, revealing patterns like the dominance of debt collection scams historically and a recent surge in online purchase scams within Kentucky. This resource helps consumers and authorities understand scam prevalence and shifts over time, although its limitations in representing the entire scope of scam activity are noted.

Global Anti-Fraud Operations and Law Enforcement Efforts

Joe highlights Interpol's international operation, 'First Light,' involving nearly 100 countries, which resulted in over 5,800 arrests and the seizure of nearly $300 million. The operation focused on combating social engineering scams and associated money laundering, including the seizure of cryptocurrencies and fake law enforcement setups in places like Espatini, South Africa. The discussion touches on the effectiveness of such large-scale operations, the collaboration of multiple countries, and the challenges of measuring their overall impact against the broad and persistent threat of cyber scams.

Hilarious and Inept Scam Accounts on TikTok

The hosts explore a humorous example of scam baiting where someone encounters a scam account impersonating musician Noah Cajon. The scam involves exaggerated flattery, nonsensical song references, and attempts to move the victim to other platforms like Zangie. The conversation emphasizes how these scammers often run volume-based operations, disregarding coherence, and rely on repetitive, low-effort responses. This segment showcases the often comical ineptitude of some scammers and the importance of skepticism online.

Sponsors

  • N2K CyberWire · This episode is brought to you by N2K CyberWire.

Show notes

This week, while Maria is out hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Dave covers a phishing campaign using fake Facebook verification emails to trick users into handing over their account credentials. Joe highlights the Better Business Bureau's new Scam Tracker heat map for visualizing scam trends and discusses a global INTERPOL operation that led to thousands of arrests and hundreds of millions of dollars in seized fraudulent funds. Our Catch of the Day is on a scam-baiter who encounters a hilariously inept TikTok scam account, proving that not every scammer is a master criminal.

Resources and links to stories:

Phishing Attacks Targeted Facebook Users With Fake Verification Offer

Heatmap

Over 5,800 arrests, USD 293 million intercepted in global fraud bust

These TikTok scam accounts are literally so stupid

⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Have a Catch of the Day you'd like to share? Email it to us at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠hackinghumans@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.

Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account

Couldn't load the audio. A blocker may be stopping the show's tracking links. Open the file