Live data from Hacker News

The golden age of scammers: AI-powered phishing

mailgun.com

21–30 of 143 posts

Re: The golden age of scammers: AI-powered phishing

#21

Hey, just going to say what I've been telling folks IRL, if you are reading this, and your parents and family members aren't tech savvy, you need to set them up with two factor authentication now. Because you know how to do that, and it's so much easier than helping them when they get hacked.

OP's article is too long and complex for my elderly relatives, I fear. Any reccs for getting them to use 2FA?

Re: The golden age of scammers: AI-powered phishing

#22
post #6

Earlier quoted context omitted.

I mean, the mere existence of said biometrics imply that they're inferrable and thus bad security, like basically all biometrics

And yet, used extensively

I mean SSNs are the worst possible authentication mechanism and yet we still have to freak out every time they're leaked. Security practices are so utterly backwards everywhere that it's quite apparent no one powerful is incentivised to care even a little bit

Re: The golden age of scammers: AI-powered phishing

#23

The section “Recognizing AI phishing attempts” is mournfully short, but there’s some companies out there like Jericho Security ( https://www.jerichosecurity.com ) that are working on countermeasures, at least for enterprises.

Is this a self promo?

Re: The golden age of scammers: AI-powered phishing

#24

The section “Recognizing AI phishing attempts” is mournfully short, but there’s some companies out there like Jericho Security ( https://www.jerichosecurity.com ) that are working on countermeasures, at least for enterprises.

I’m skeptical we can develop effective ones, due to the fact that we have been unable to solve non-AI phishing problems but I welcome their attempt.

Re: The golden age of scammers: AI-powered phishing

#25

On YouTube, I saw a deepfake of Elon Musk asking people to scan a QR code and buy crypto.

Imagine getting scammed by a deepfake of Musk when you'd actually set out to get scammed by the man himself.

I mean it seems simpler to just buy a cybertruck if that's what you want

Re: The golden age of scammers: AI-powered phishing

#26
post #6

Earlier quoted context omitted.

I mean, the mere existence of said biometrics imply that they're inferrable and thus bad security, like basically all biometrics

And yet, used extensively

When I call my bank they verify with my voice. There are further verification for meaningful actions but its still kind of crazy to be using "My Voice is my Password" this day in age.

Re: The golden age of scammers: AI-powered phishing

#27
post #22

Earlier quoted context omitted.

And yet, used extensively

I mean SSNs are the worst possible authentication mechanism and yet we still have to freak out every time they're leaked. Security practices are so utterly backwards everywhere that it's quite apparent no one powerful is incentivised to care even a little bit

what's the practical alternative?

Re: The golden age of scammers: AI-powered phishing

#28

It’s actually worse than that - AI powered phishing sites will also copy your device profile and mouse, gesture and keyboard signature and use this to get past common anti-fraud techniques like device fingerprinting and behavioural biometrics.

What does AI have to do with capturing inputs ?

Re: The golden age of scammers: AI-powered phishing

#29
post #22

Earlier quoted context omitted.

I mean SSNs are the worst possible authentication mechanism and yet we still have to freak out every time they're leaked. Security practices are so utterly backwards everywhere that it's quite apparent no one powerful is incentivised to care even a little bit

what's the practical alternative?

Scanning your digital ID card would be a start, but oHnO that's cOmmUniSM!

Re: The golden age of scammers: AI-powered phishing

#30

Hey, just going to say what I've been telling folks IRL, if you are reading this, and your parents and family members aren't tech savvy, you need to set them up with two factor authentication now. Because you know how to do that, and it's so much easier than helping them when they get hacked.

OP's article is too long and complex for my elderly relatives, I fear. Any reccs for getting them to use 2FA?

Rather than sending an article that they'll ignore, I recommend helping them do it when you visit. Note: you're guarding against phishing and also locking themselves out of their accounts. Both are important.

I bought Mom a Yubikey and helped her set it up on her Google account. She has it on her keychain. She doesn't need to remember how to use it, though, since it's only needed when she buys a new computer.

For good measure, I also helped her print out backup codes (and I know where they are) and I registered my Yubikey, just in case.

Nowadays, an old backup phone might also work, but I think paper backups are better because an old, unused phone might not start.

Post reply on HN