Hacking Humans: AI Scams, LinkedIn Phishing, and Romance Fraud

Listener Follow-Up: Suspicious Text Messages

• 💡 A listener reported receiving suspicious text messages with a nearby address, prompting discussion on potential data breaches and the advice to never go to an unknown address.
• 🔍 The address led to a deep discount store, raising possibilities of budget advertising or a more elaborate scam.

AI-Powered Financial Aid Fraud

• 🤖 Scammers are using AI chatbots as "ghost students" to enroll in online college courses and steal federal financial aid funds.
• ⚠️ Identity theft victims are left with fake student loans and extensive bureaucratic cleanup.
• 🎯 Community colleges are targeted due to their low tuition, allowing for significant overages from financial aid loans.
• 📚 The Department of Education warns that identity theft fraud imperils the federal student aid program.

LinkedIn Job Seeker Scams

• 🎣 Cybercriminals, like the FIN6 group, are posing as job seekers on LinkedIn to trick recruiters.
• 🔗 Deceptive tactics include fake portfolio websites and malware-laced resumes, bypassing traditional link-based filters by using typed URLs.
• 💻 The attack chain involves downloading a zip file containing a shortcut that installs MoreEggs backdoor malware, leading to credential theft and potential ransomware.

Romance and Email Hacking Scams

• 💔 A Pennsylvania woman, an accountant, scammed over $800,000 from clients, including a church, by hacking emails and rerouting payments.
• 🎭 She claims she was manipulated by a famous British actor she believed she was dating, highlighting the overlap between romance scams and financial fraud.
• ⚖️ The convicted woman was sentenced to 48 months in prison and ordered to repay nearly $600,000.

Catch of the Day: Bogus Traffic Fine Scam

• 🚨 A convincing but fake text message claims an overdue traffic fine under a non-existent regulation.
• ⚠️ The message threatens license suspension and credit damage to coerce recipients into clicking a malicious link.
• 🧐 The scam relies on citing fake regulations and leveraging fear to exploit victims.