Hacking Humans: Seniors Targeted by Scams, IoT Security Risks, and Cloud Account Breaches

Scam Prevention and Follow-ups

• 💡 Robinhood has implemented a simple in-app banner to warn users against phone scams, stating, "We're not calling you. If the caller says they're from Robinhood, they're not—hang up."
• 💥 Myanmar's military has reportedly blown up major online scam centers, with over 1,500 individuals fleeing into Thailand.
• 💳 A listener corrected the hosts, emphasizing that the correct term is "CAC cards" (Common Access Cards), not just "CAC."
• ☕ A barista at Scooter's Coffee has observed customers bringing various pets, including a chicken, for "pup cups" (whipped cream).

IoT Security Landscape Report

• 🏠 A Bitdefender and Netgear report indicates that smart homes face an average of 29 IoT attacks per day, a threefold increase from 2024.
• 📱 Mobile devices are the most common connected endpoints (nearly 20%), followed by smart TVs (9.5%) and streaming devices (7.3%).
• 🎯 Entertainment devices like smart TVs and IP cameras are the most frequently targeted IoT devices, often due to being left unpatched.
• ⚠️ 99.4% of IoT exploits target known and already fixed vulnerabilities (CVEs), rather than weak passwords.
• 📈 The most common CVSS score for exploited IoT vulnerabilities is 7.8, indicating a high criticality.
• 🔒 Key advice for users includes keeping an updated inventory of devices, disabling unused ones, segmenting networks, and avoiding exposing devices to the internet unless necessary.

Cloud Security and Personal Account Breaches

• 🔑 A cloud architect accidentally exposed his AWS access keys online, leading to his account being compromised for crypto-mining and phishing attempts.
• 📧 Attackers used a flood of spam emails as a smokescreen to hide critical security alerts from AWS.
• 🛡️ The researcher reset his password, enabled multi-factor authentication, deleted fake users, and contacted AWS support to put his account in "under attack" mode.
• 💡 The primary lesson learned is that security is a habit, not an afterthought, and if it can happen to a professional, it can happen to anyone.

FTC Report on Scams Targeting Seniors

• 👵 Older adults are disproportionately targeted by scams, often losing significant amounts of money.
• 🚨 Three common scam tactics include: "Someone is using your accounts," "Your information is being used to commit crimes," and "There's a security problem with your computer."
• 💸 Reported losses in 2024 for scams targeting older adults reached hundreds of millions of dollars, with combined losses over $100,000 exceeding $445 million.
• 📞 Key advice from the FTC: Don't move money to protect it, hang up and verify, and block unwanted calls.

Catch of the Day: Scammer Bait

• 🎣 A user on the Scams SubReddit engaged a potential scammer in a lengthy text conversation, wasting the scammer's time.
• 🎭 The scammer, posing as a recruiter from Indeed Job Center, was met with humorous and absurd responses, including fabricated personal stories and inappropriate jokes.