AI ransomware, hiring fraud and the end of Scattered Lapsus$ Hunters
The podcast episode discusses the evolution of AI and cybersecurity threats, including deep fakes, ransomware, phishing, and identity scams, while exploring the ongoing activities of threat groups like Scattered Lapsis Hunters and analyzing major threats to critical infrastructure.
MAIN POINTS FROM TRANSCRIPT
- AI advancements have significantly improved deep fakes beyond early examples like Forrest Gump.
- Scattered Lapsis Hunters may continue their activities despite announcing they are going dark.
- A single phishing email can lead to multiple compromised npm packages.
- Business identity compromise scams are increasingly giving hackers legitimate job roles for illicit purposes.
TAKEAWAYS
- AI-powered ransomware is currently a proof of concept but poses future risks.
- IBM X Force Analysis highlights major threats to operational technology and critical infrastructure.
- Threat actors sometimes inadvertently install security tools like Huntress EDR on their own devices.
- The podcast features expert insights and upcoming interviews on cybersecurity costs and securing AI identities.