Smashing Security Smashing Security

How a fake police officer nearly stole Graham's cryptocurrency

Aug 5, 2026 · 59m

Summary

Graham Cluley recounts a sophisticated social engineering attempt where a fake detective tried to steal his cryptocurrency seed phrase. Danny Palmer then details "Captive Crunch," a Russian state-sponsored campaign hijacking hotel Wi-Fi DNS to infect travelers with malware. The episode also covers a data breach of the UK Department for Education, exposing 600,000 records of teachers and university staff to extortionists.

Topics discussed

Fake police officer scam targeting cryptocurrency holders Sponsors: Arctic Wolf, NordLayer, and Vanta Captive Crunch: Hotel Wi-Fi DNS hijacking attacks NordLayer sponsor segment UK Department for Education data breach and ransomware Arctic Wolf report on ghost assets and security gaps Nitpick of the Week: Fraudulent Doctor Who book author Pick of the Week: Half-Life: Black Mesa game Outro, Patreon supporters, and McDonald's ad
Listen ad-free on Castria