
Hacking Humans
Deception, influence, and social engineering in the world of cyber crime.
Latest episodes

Feb 4, 2025 • 47min
Cyber Groundhog Day and romance scams. [Only Malware in the Building]
Explore the world of romance scams, particularly the alarming tactic of 'pig butchering,' where scammers exploit victims emotionally and financially. Hear humorous reflections on the repetitive nature of life and the necessity of cybersecurity awareness. Dive into strategies for combatting social engineering scams and the troubling connection between loneliness and online fraud. This engaging discussion emphasizes the importance of education, awareness, and collective efforts in tackling the evolving landscape of digital threats.

Jan 30, 2025 • 45min
Despicable donation request scamming.
This week dives into the world of online scams, starting with AI-generated personas selling fake leather bags. It highlights a troubling romance scam that left victims with emotional scars, alongside a horrifying story of false medical donation requests exploiting people's kindness. The discussion also uncovers the manipulative tactics used by scammers and the challenges of securing restaurant reservations during busy events, revealing a black market dynamic. There's an urgent call for awareness and protective measures against these deceptive schemes.

Jan 28, 2025 • 9min
endpoint security [Word Notes]
Discover the evolution of endpoint security, from the 1970s mainframes to today's advanced EDR and XDR solutions. Explore key milestones and influential figures in cybersecurity. Delve into the complex legacy of John McAfee, the antivirus pioneer, as his controversial life and legal battles unfold. Reflect on the impact of his tumultuous journey right up to his final days in a Spanish prison.

Jan 23, 2025 • 43min
Back to the office, back to the threats.
As many return to the office, new security challenges emerge. The need for Red Team assessments is emphasized to close digital and physical gaps. A warning from the FCC highlights the Green Mirage scam, where fraudsters target vulnerable homeowners. Meanwhile, a Reddit user shares their experience with a suspicious Airbnb listing, revealing the importance of vigilance in online transactions. Lastly, a listener's alert about a phishing scam illustrates the growing threat posed by deceptive crypto communication.

Jan 21, 2025 • 8min
Executive Order on Improving the Nation's Cybersecurity (noun) [Word Notes]
Explore President Biden's ambitious executive order aimed at boosting federal cybersecurity. Discover how this mandate sets specific deadlines for agencies and IT contractors. Reflect on historical efforts from the Obama administration as the podcast delves into the order's stringent standards and innovative practices. Unpack the essential role of cybersecurity in government operations and the overarching challenges in enhancing national defense against digital threats.

Jan 16, 2025 • 42min
Crypto chameleons and star fraud.
This discussion dives into the alarming rise of social engineering scams, spotlighting a jury duty con that defrauded a victim out of $12,000. Listeners will learn about a prison-based scheme using spoofed identities to siphon cryptocurrency, as well as a job interview that turned into a hacking attempt through obfuscated code. The hosts also tackle the implications of Apple’s new AI feature, which may inadvertently aid scammers, and share tips on navigating tech scams, emphasizing the need for heightened cybersecurity awareness.

Jan 14, 2025 • 8min
lateral movement (noun) [Word Notes]
Cyber adversaries expertly navigate compromised networks, seeking sensitive data. Advanced security measures are crucial to preventing unauthorized access. The discussion also delves into the evolution of military and cybersecurity strategies, using real-world examples like the SolarWinds incident. Additionally, the podcast examines the complexities of ransomware from an attacker’s perspective and outlines various defensive strategies organizations can implement. Proactive cybersecurity is highlighted as essential to mitigate risks from evolving cyber threats.

Jan 9, 2025 • 53min
Nice to meet you, I'm a scammer.
This episode dives deep into the world of social engineering and the rise of romance scams, featuring a heartbreaking story of a woman who lost her life savings. The hosts debate whether diamonds are the original cryptocurrency and discuss the controversial PayPal Honey extension that affects influencers. They also explore the final payouts from the Madoff Victim Fund, highlighting the tragic fallout from Ponzi schemes. Along the way, there's a humorous take on scams and tech issues, making for an engaging and informative listen.

Jan 7, 2025 • 7min
common vulnerabilities and exposures (CVE) (noun) [Word Notes]
Dive into the world of cybersecurity with an exploration of the Common Vulnerabilities and Exposures list, a crucial tool for identifying software flaws. Learn how the U.S. government initiated this public database to help streamline vulnerability management. Discover the collaborative efforts of various organizations that keep this resource up to date, and understand its significance in tackling the increasing number of vulnerabilities in our digital landscape.

Jan 7, 2025 • 55min
Malware metamorphosis: 2024 reflections and 2025 predictions. [Only Malware in the building]
This episode dives into the wild world of cyber threats, revealing ransomware's alarming rise and the financial chaos it brings. The hosts discuss cutting-edge cybersecurity measures like zero-trust models and multi-factor authentication, stressing the importance of user education. Nation-state hacking, especially from China, raises eyebrows, while the ethics of AI get a critical spotlight. The mix of serious themes and humorous banter keeps the conversation engaging as they reflect on lessons learned and prepare for the challenges of 2025.