Easy Prey17 Sep 2025

AI Supercharges Scams

Cybercriminals are accelerating their attacks in ways that weren't possible a few years ago. Artificial intelligence is giving them the ability to spin up phishing campaigns, voice clones, and deepfakes in minutes instead of days. As a result, the gap between what's genuine and what's fake is closing fast, making it harder for both individuals and organizations to defend themselves.

I'm thrilled to welcome Brett Winterford, Vice President of Okta Threat Intelligence. Brett has had a front row seat to these changes. His team analyzes identity-based attacks and delivers insights to help organizations adapt their defenses. Brett previously served as Okta's Regional CISO for Asia-Pacific and Japan and started his career as a journalist covering information security before moving into leadership roles in banking, government, and technology.

In this episode, Brett explains how AI is reshaping the speed and scale of cybercrime, why trusted platforms like email, SMS, and collaboration tools are being targeted, and what practical steps can reduce risk. He highlights the growing importance of phishing-resistant authentication methods like passkeys, the need for clearer communication between service providers and users, and the role of collaboration across industries and law enforcement in pushing back against attackers.

Show Notes:

[00:00] Brett Winterford introduces himself as Vice President of Okta Threat Intelligence and explains how identity-based threats are monitored.
[02:00] He shares his career path from cybersecurity journalist to CISO roles and now to leading threat intelligence.
[05:48] Brett compares phishing campaigns of a decade ago with today's AI-driven ability to launch attacks in minutes.
[08:00] He notes how reconnaissance and lure creation have become easier with artificial intelligence.
[10:40] Brett describes the shift from banking malware to generic infostealers that sell stolen credentials.
[12:30] He explains how cryptocurrency changed the targeting of attacks by offering higher payouts.
[14:21] We learn about the Poison Seed campaign that used compromised bulk email accounts to spread phishing.
[15:26] Brett highlights the rise of SMS and other trusted communication channels as phishing delivery methods.
[16:04] He explains how attackers exploit platforms like Microsoft Teams and Slack to bypass traditional defenses.
[18:30] Brett details a Slack-based campaign where attackers impersonated a CEO and smuggled phishing links.
[22:41] He warns that generative AI has erased many of the old "red flags" that once signaled a scam.
[23:01] Brett advises consumers to focus on top-level domains, official apps, and intent of requests to detect phishing.
[26:06] He stresses why organizations should adopt passkeys, even though adoption can be challenging.
[27:22] Brett points out that passkeys offer faster, more secure logins compared to traditional passwords.
[28:31] He explains how attackers increasingly rely on SMS, WhatsApp, and social platforms instead of email.
[31:00] Brett discusses voice cloning scams targeting both individuals and corporate staff.
[32:30] He warns about deepfake video being used in fraud schemes, including North Korean IT worker scams.
[34:59] Brett explains why traditional media-specific red flags are less useful and critical thinking is essential.
[37:15] He emphasizes the need for service providers to create trusted communication channels for verification.
[39:29] Brett talks about the difficulty of convincing users to reset credentials during real incidents.
[41:00] He reflects on how attackers adapt quickly and why organizations must raise the cost of attacks.
[44:18] Brett highlights the importance of cross-industry collaboration with groups like Interpol and Europol.
[45:24] He directs listeners to Okta's newsroom for resources on threat intelligence and recent campaigns.
[47:00] Brett advises consumers to experiment with passkeys and use official apps to reduce risk.
[48:00] He closes by stressing the importance of having a trusted, in-app channel for security communications.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(329)

Job Recruiter Scams

Job hunting is hard enough without having to stop and ask whether the recruiter in your inbox is even real. My guest today, Jay Jones, ran into that problem firsthand after being laid off in December ...

24 Jun 35min

Bail Bonds Scams

Getting a call that someone you love has been arrested is scary enough. Getting that call from someone who sounds official, knows just enough to seem credible, and says you have to send money right aw...

17 Jun 36min

Confessions of a Fraudster

Technology keeps changing, but many of the most effective scams still come down to something very human: trust. My guest today is Tony Sales, co-founder of We Fight Fincrime and Underworld TV. Tony ha...

10 Jun 54min

Personal Safety

Scams and safety threats don't always announce themselves. Sometimes they start quietly, with a moment of distraction, a strange feeling you ignore, or a situation that shifts just enough to test whet...

3 Jun 43min

Data For Sale

Everyday conveniences ask for tiny pieces of information all the time like a phone number at checkout, a zip code at the register, an email address for a receipt, or a loyalty account for a small disc...

27 Mai 43min

Exploiting Psychology

Scams are often explained as a failure of judgment, but the truth is far more human. People are not fooled because they are foolish. They are manipulated at the exact moment emotion overrides logic, w...

20 Mai 45min

Investment Traps

Investment losses can be confusing because they do not always tell the whole story. Sometimes money is lost because the market has changed. Other times, an investor was sold something they did not und...

13 Mai 47min

Elder Exploitation

Aging parents often rely on the people closest to them for help, but what happens when that help becomes a way to take control? For Charles Wallace, the warning signs started small. His mother's fridg...

6 Mai 39min