Discover the shocking rise of gold bar scams as a couple loses over $367,000 to clever con artists posing as officials. Learn about a cybersecurity expert who foiled a social engineering attack by spotting inconsistencies in the impersonator's story. The discussion also includes how criminals are leveraging generative AI to amplify their fraud schemes, creating realistic phishing attempts. Dive into childhood memories mixed with critical tips for safeguarding against increasingly sophisticated online scams.
The alarming rise in gold bar scams exploits victims' fear and urgency, leading to significant financial losses, particularly among the elderly.
Sophisticated social engineering attacks can be thwarted through awareness and verification of inconsistencies, as demonstrated by a KnowBe4 employee's experience.
Deep dives
VIN Swap Scam Awareness
A recent case illustrates the dangers of VIN swap scams, where a man unknowingly purchased a stolen GMC truck from Facebook Marketplace. The buyer, Sherman Habibian, ended up at a VIN verification site when police intervened, discovering the vehicle's stolen status. Fortunately, he had requested the seller's driver's license, which turned out to be fake and helped authorities locate the perpetrator. Experts recommend conducting vehicle transactions at VIN inspection stations to avoid such scams and ensure vehicles are not stolen before finalizing any purchase.
Scams and Cryptocurrency
The discussion highlights the complexities around cryptocurrency usage, particularly in paying taxes. While it's technically possible to pay state taxes in Colorado and Utah using cryptocurrency, it's not a common practice, raising concerns about potential fraud implications. The hosts reflect on the absurdity of paying taxes in a volatile currency, likening it to attempting to settle debts in pennies. Speculation about the future of cryptocurrency under the new administration suggests an increase in scams related to digital currencies.
Real-Time Social Engineering Scam Foiled
An attempted social engineering scam aimed at a KnowBefore employee reveals how sophisticated these attacks can be. The VP received a call impersonating the head of HR and was tricked into believing he was in a dire financial situation due to an account lockdown. Recognizing several red flags, including the caller's lack of knowledge about company protocols, the employee successfully identified the scam. This incident underscores the importance of awareness and verification procedures within organizations to protect against impersonation attempts.
Escalating Gold Bar Scams
A couple's experience with a gold bar scam highlights the alarming rise of such fraudulent schemes. Initially targeted through a phishing text about their Apple ID, they were led down a path involving claims of money laundering and threats of legal consequences, ultimately resulting in them being persuaded to purchase gold bars for safekeeping. The police intervened, leading to an arrest during a planned pickup of the gold bars, but the scam underscores how criminals exploit fear and urgency. Montgomery County has reported over $6.6 million in gold bar scams, raising concerns about their prevalence nationally.
On Hacking Humans, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are once again sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines to help our audience become aware of what is out there. First we start off with some follow up, our hosts share some more information on VIN swapping, and a clarification on bank participation in FinCEN. Maria shares a telling tale about a Bethesda couple loosing $367,000 in gold bars to a sophisticated scam involving fake officials and elaborate deceptions, but a police sting led to the arrest of a suspect, highlighting a growing nationwide trend of elderly victims targeted by gold bar fraud. Joe's story comes from KnowBe4 and is on DavidB, their VP of Asia Pacific, thwarting a sophisticated social engineering attack via WhatsApp by recognizing inconsistencies in the impersonator’s behavior and verifying directly with the colleague they claimed to be. Dave's story comes from the FBI on how criminals are exploiting generative AI to enhance fraud schemes, including using AI-generated text, images, audio, and video to create convincing social engineering attacks, phishing scams, and identity fraud, while offering tips to protect against these threats. Our catch of the day comes from a listener who received an urgent email from someone claiming to be an FBI agent with a rather dramatic tale about intercepted consignment boxes, missing documents, and a ticking clock—but let's just say this "agent" might need some better training in both law enforcement and grammar.