
This episode discusses a job interview scam involving North Korean hackers and highlights a significant Bluetooth vulnerability affecting millions of cars.
You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they can verify who you really are. Which is ironic, because the person recruiting you doesn't exist. And North Korean hackers using this trick have already made off with $643 million in crypto this year alone. Meanwhile, researchers at UC San Diego have discovered that 2.2 million cars across the United States can be unlocked or immobilised by anyone with a bit of Bluetooth kit - thanks to one aftermarket car alarm that made a truly spectacular cryptographic blunder. The bug has been sitting there since 2017. Nobody noticed. All this and more in episode 478 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Paul Ducklin. EPISODE LINKS: OpenAI's AI "goes rogue" and hacks Hugging Face: what you need to know - Hot for Security. Post by Graeme Bell - Linkedin. HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels - Group-IB. Ransom gang targets Dutch ice arena Thialf in cyberattack - Cybernews. No Shark is Safe: Millions of Shark Vacuums…
Host: Graham Cluley
Guest: Paul Ducklin
Organizations: UC San Diego, North Korean hackers, OpenAI, Hugging Face, Group-IB, Cybernews, Tokay0, SOCRadar, TRM Labs
Explore listener stats, chart rankings, contacts and more on the Smashing Security podcast page.