This is the AI service you should never sign up to
Summary
In Smashing Security episode 480, Graham Cluley and guest Leanne Potter discuss "Poison Claude," a fraudulent service exploiting AWS free credits to offer cheap AI access while harvesting user data. They also analyze "Greatness," a phishing kit that weaponizes legitimate Microsoft device code flows to steal OAuth tokens without passwords. Leanne shares her research on using AI to de-radicalize incels and recommends secure remote access tools Tailscale and RustDesk.
Topics discussed
Introduction and Leanne Potter's new roles
AI companions and de-radicalizing incels
Arctic Wolf report on invisible IT assets
Poison Claude: Fraudulent AI access via stolen AWS credits
NordLayer sponsor segment
Greatness phishing kit and device code attacks
Vanta sponsor segment
Pick of the Week: Tailscale and RustDesk
Pick of the Week: League of the Lexicon game
Outro and Patreon supporter shoutouts
Listen ad-free on Castria