Hacking Humans: "Scamming Just Isn't What It Used to Be" – Detailed Summary

Podcast Information:

• Title: Hacking Humans
• Host/Author: N2K Networks
• Description: Deception, influence, and social engineering in the world of cybercrime.
• Episode: Scamming Just Isn't What It Used to Be
• Release Date: November 28, 2024

1. Introduction and Follow-Up Discussions

The episode opens with Dave Buettner welcoming listeners to the Hacking Humans podcast, joined by Joe Kerrigan from the Johns Hopkins University Information Security Institute and returning host Maria Varmasis. The trio delves into recent listener feedback and follow-up stories.

Gift Card Scams: Joe shares an insightful anecdote from a listener involved in gift card theft:

"I know people who would shoplift the gift cards off the rack and bring them back home and then scratch off the scratch off that little part under the silver part." (02:35)

The discussion reveals a sophisticated method where scammers steal gift cards, remove the scratch-off layer, record the numbers, and return the cards to shelves. They then sell these stolen balances online for a percentage of their value.

Multifactor Authentication Concerns: Dave raises concerns about Wells Fargo using SMS-based multifactor authentication:

"Wells Fargo is using this as a way to identify you. I find this strangely wrong." (07:03)

Recommendations: Joe emphasizes the importance of credit freezing and identity theft insurance, especially for vulnerable individuals:

"Never get out information again. On the inbound calls, just say hang up, I'll call you back." (10:20)

2. Sextortion and Social Media Exploits

Guest Introduction: Maria introduces the episode's main focus on sextortion, a rising threat targeting minors through social media platforms like Snapchat, Instagram, and the teen dating app, Wizard.

Understanding Sextortion: Maria explains sextortion as a form of blackmail where criminals coerce victims into sending explicit material, subsequently threatening to expose it unless money is paid. This method leverages shame to manipulate minors, often leading to severe emotional distress and, tragically, suicides.

Scammer Tactics: Joe describes the organized nature of these scams:

"These guys have a script that they're following." (18:34)

Key tactics include:

• Catfishing: Scammers pose as attractive individuals to build trust.
• Exploiting Social Networks: Once integrated into a victim's network, they gain credibility.
• Use of Hacked Accounts: Criminals utilize compromised accounts with high activity to appear legitimate.

Impact and Statistics: Maria cites a report from the Network Contagion Research Institute (NCRI):

"Incidents of this extortion crime have surged 1,000% over the last 18 months." (18:30)

Yahoo Boys: The discussion highlights a West African group known as the "Yahoo Boys," notorious for executing these scams using platforms like Yahoo Mail and leveraging social engineering techniques to target athletes and students.

Preventive Measures: Maria offers critical advice for minors and their guardians:

"Make sure that your child is not the only person that's involved in the financial decisions." (11:58)

Emotional Toll: Joe underscores the emotional devastation caused by these scams, emphasizing that victims are often left feeling isolated and humiliated:

"You're a victim, just like the bank is a victim." (10:20)

3. Additional Stories and Insights

Phishing Email Trends: Dave presents findings from Cofense, a cybersecurity company analyzing 2023 phishing email themes:

• Finance (54%)
• Notification Scams (35%)
• Shipping Scams (7%)
• Response Scams (3%)

Emerging Scam Techniques: Joe discusses the FBI's notice about scammers employing couriers to collect cash or precious metals from victims:

"They are hiring couriers to collect cash from people when they scam them." (30:23)

Scammers prefer valuable yet anonymous transactions, making precious metals an attractive option. This tactic bypasses traceability and complicates law enforcement efforts.

4. Catch of the Day: Facebook Messenger Scam

Scam Example: Dave shares a real-life phishing attempt targeting businesses via Facebook Messenger:

"Important notification. Your Facebook page is scheduled for permanent deletion due to a post that has infringed upon our trademark rights." (41:59)

Analysis: Joe breaks down the scam's red flags, such as suspicious URLs and the use of impersonated Facebook support:

"Instead of going to Facebook, it goes to some website called cake.com... Lots of red flags." (43:31)

Prevention Tips:

• Verify URLs: Always check the authenticity of links before clicking.
• Direct Communication: Reach out to official support channels if in doubt.

5. Conclusion and Key Takeaways

The episode concludes with the hosts reiterating the importance of vigilance against evolving scams. They emphasize educating oneself and loved ones about the latest fraud tactics and adopting robust security measures to mitigate risks.

Final Advice: Maria urges parents to foster open communication with their children regarding online interactions:

"Tell your children, tell your teenage contacts that those friends lists are available to a potential extortionist." (24:58)

Hosts' Sign-Off: Dave, Joe, and Maria thank listeners for tuning in, highlighting the critical nature of staying informed to protect against sophisticated cybercriminal activities.

Notable Quotes with Timestamps:

• Joe Kerrigan (02:35): "I know people who would shoplift the gift cards off the rack and bring them back home and then scratch off the scratch off that little part under the silver part."

• Dave Buettner (07:03): "Wells Fargo is using this as a way to identify you. I find this strangely wrong."

• Joe Kerrigan (10:20): "Never get out information again. On the inbound calls, just say hang up, I'll call you back."

• Maria Varmasis (18:30): "Incidents of this extortion crime have surged 1,000% over the last 18 months."

• Joe Kerrigan (18:34): "These guys have a script that they're following."

• Dave Buettner (30:23): "They are hiring couriers to collect cash from people when they scam them."

• Dave Buettner (41:59): "Important notification. Your Facebook page is scheduled for permanent deletion due to a post that has infringed upon our trademark rights."

Final Note: For more insights and to stay updated on the latest in cyber deception and social engineering tactics, visit Hacking Humans and consider subscribing to the podcast on your preferred platform.