This job interview could destroy your company
Summary
Graham Cluley and Paul Ducklin discuss a North Korean "fake interview" scam that uses social engineering to install malware, and a critical vulnerability in KARR aftermarket car alarms. They reveal how these devices use a single master key, allowing attackers to unlock or immobilize vehicles even if the service is deactivated. The episode also touches on recent AI security controversies and the broader implications of state-sponsored cybercrime.
Topics discussed
Intro: Car alarm anecdote and show welcome
Discussion on AI security headlines and PR stunts
Arctic Wolf report on unmanaged IT assets
Fake job interview scams by North Korean hackers
Technical breakdown of the 'Wage Mold' malware attack
Sponsor segment: Vanta compliance automation
KARR car alarm vulnerability and Bluetooth security flaws
Sponsor segment: Nord Layer enterprise VPN
Pick of the Week: The TV show 'Android'
Pick of the Week: Historical sites in the UK
Outro, credits, and patron shoutouts
Listen ad-free on Castria