Hacking Humans cover image

Hacking Humans

Latest episodes

undefined
Jan 2, 2025 • 42min

The intersection of hackers, scammers, and false collaborations.

Dive into the dark world of social engineering scams and phishing schemes. Discover the alarming rise of brushing scams, where unsolicited packages lead victims to malicious QR codes. Learn how pallet liquidation scams lure buyers with unrealistic prices and false promises. Get essential tips on securing your text messages against sophisticated foreign hacking efforts. Plus, hear a cautionary tale of a suspicious email posing as a business collaboration with an unexpected twist. Awareness is key in this relentless digital battlefield!
undefined
Dec 31, 2024 • 6min

dead-box forensics (noun) [Word Notes]

Explore the fascinating world of dead box forensics, where experts capture complete images of digital systems to analyze their contents offline. Discover the evolution of methodologies that ensure evidence preservation and integrity. Uncover the challenges forensic professionals face in adapting to rapidly changing technology while striving for justice. This insightful discussion reveals the meticulous processes that go into digital evidence analysis, making it a crucial component in modern investigations.
undefined
Dec 26, 2024 • 49min

New tools, old problems.

Please enjoy this encore episode of Hacking Humans. This week we are joined by Maria Varmazis, host of the N2K daily space show, T-Minus. She discusses how AI is being used as a possible solution to one of the oldest scams in the book in Japan. Dave and Joe share some listener follow up, one from listener Alan and one from Clinton, who both write in about a recent episode and they share their thoughts on the story of Charlotte Cowles being scammed out of $50,000. Dave shares a story about calendar meeting links, from Calendly, a popular application for scheduling appointments and meetings, being used to spread mac malware. Joe shares write ins from several listeners, some writing in to share experiences with scams they have come across, others writing to warn others on scams they have seen used in the real world. Our catch of the day comes from Zach with an oddity, getting scammed by mail! Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Japan’s new ATMs automatically play anti-fraud videos to people talking on mobile phones【Video】 Fraudsters in Japan use foreigners' bank accounts in cash grab 【警察庁】ATMで携帯電話…AIで検知し警告表示 特殊詐欺の被害増受け Calendar Meeting Links Used to Spread Mac Malware IDcare You can hear more from the T-Minus space daily show here.Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com.
undefined
Dec 24, 2024 • 7min

cybersecurity maturity model certification (CMMC) (noun) [Word Notes]

Discover the essentials of the Cybersecurity Maturity Model Certification, a crucial accreditation for companies aiming for U.S. Department of Defense contracts. Delve into the historical evolution of maturity models and the necessary shift from self-attestation to rigorous third-party audits. Understanding this framework is vital for enhancing cybersecurity and ensuring compliance by the 2025 deadline.
undefined
Dec 19, 2024 • 46min

Gold bars and bold lies.

Discover the shocking rise of gold bar scams as a couple loses over $367,000 to clever con artists posing as officials. Learn about a cybersecurity expert who foiled a social engineering attack by spotting inconsistencies in the impersonator's story. The discussion also includes how criminals are leveraging generative AI to amplify their fraud schemes, creating realistic phishing attempts. Dive into childhood memories mixed with critical tips for safeguarding against increasingly sophisticated online scams.
undefined
Dec 17, 2024 • 8min

incident response (noun) [Word Notes]

Please enjoy this encore episode of Word Notes. A collection of people, process, and technology that provides an organization the ability to detect and respond to cyber attacks.
undefined
Dec 12, 2024 • 45min

Silent push, loud consequences.

On Hacking Humans, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are once again sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines to help our audience become aware of what is out there. This week, Maria shares two stories this week, the first is from "PayPal" saying they are owed over $200. The second comes from LinkedIn where a gentleman shares the terrifying story of losing everything all because of a scam. Joe's story is on text message scams where strangers pretend to know you, building trust over time to lure victims into schemes like cryptocurrency fraud; he advises ignoring unknown messages, blocking suspicious numbers, avoiding links, and protecting personal information. Dave's story follows Silent Push Threat Analysts tracking "Payroll Pirates," a group leveraging phishing campaigns targeting HR systems like Workday to redirect payroll funds by using search ads, spoofed websites, and credential harvesting, as they alert organizations and share threat intelligence to counter these sophisticated attacks. Our catch of the day comes from a phishing scam email claiming to offer a $1.75 million compensation fund via the "United Bank for Africa," requiring victims to share personal and banking details under the guise of an IMF directive.Resources and links to stories: “Wrong Number” Text Scams on the Rise Hunting Payroll Pirates: Silent Push Tracks HR Redirect Phishing Scam You can hear more from the T-Minus space daily show here.Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@n2k.com.
undefined
Dec 10, 2024 • 6min

script kiddies (noun) [Word Notes]

Please enjoy this encore episode of Word Notes.Cybercriminals who lack the expertise to write their own programs use existing scripts, code, or tools authored by other more skilled hackers. 
undefined
Dec 5, 2024 • 48min

Fraud's festive frenzy.

On Hacking Humans, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are once again sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines to help our audience become aware of what is out there. This week, our hosts dive into some follow up from listener Will. who writes in about the Financial Crimes Enforcement Network. They also share after an anonymous listener writes in with a suggestion on filtering scam emails using the DocuSign API. Maria follows the story of how Black Friday is increasingly being dubbed "Black Fraud Day," as criminals exploit the festive shopping frenzy to scam eager bargain hunters, often using AI to create convincing fraud schemes. Joe has two stories this week. The first one is on scammers exploiting financially distressed individuals by posing as the "Bankruptcy Fraud Watchdog Group," threatening bankruptcy filers with false accusations and fines payable in Bitcoin, while warning them against contacting their attorneys. The second story explores the rise of deepfake scams in the U.S., with criminals using AI-generated videos of celebrities like Elon Musk to deceive victims into fraudulent cryptocurrency investments, contributing to over $12 billion in annual fraud losses. Finally, Dave share's a story on a new wave of deepfake scams, where AI-generated videos of Elon Musk trick unsuspecting victims into investing large sums, contributing to billions in fraud losses. Our catch of the day comes from Raul, who shares a scammy text message sent to his mother, sharing his efforts to educate her on spotting fraudulent messages. Resources and links to stories: Black Friday turning into Black Fraud Day, says UK cybersecurity chief U.S. Trustee Program Warns Consumers of Bankruptcy Fraud Alert Scam Deepfakes of Elon Musk are contributing to billions of dollars in fraud losses in the U.S. Inside the Mind of Thru-Hiking’s Most Devious Con Man You can hear more from the T-Minus space daily show here.Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@n2k.com.
undefined
Dec 3, 2024 • 6min

sandbox (noun) [Word Notes]

This discussion delves into the fascinating concept of sandboxes in cybersecurity. It explores how these controlled environments allow for the safe execution of potentially harmful code. The historical evolution of sandboxing is highlighted, showcasing its journey from educational tools to critical security measures. The importance of these systems in protecting sensitive information from cyber threats is emphasized, making it clear that sandboxes play a vital role in modern computing.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode