686: North Korean Remote Job Infiltration, Apple Threat Alerts, and Stopping Gift Card Scams
/Joe and Sam discuss a Wall Street Journal documentary on North Korean operatives using stolen identities, AI tools, and U.S. accomplices to gain remote jobs at American companies, including schemes where U.S.-based helpers host shipped laptops for overseas workers, raising financial and data-leak risks. They note interview red flags, AI face/voice masking, and an email pitch offering a U.S. partner for a 50/50 split. Sam updates on trying FDA-approved Closee eye drops for age-related vision issues, finding partial improvement but stopping due to itching/burning and concern over past side effects. They troubleshoot Fireflies AI auto-joining meetings via default settings after easy “Sign in with Microsoft” onboarding. Joe reviews Apple threat notifications, Lockdown Mode effectiveness, verification via account.apple.com, and Consumer Reports resources. Sam outlines KnowBe4 security awareness training and shares a near-miss CEO text gift-card scam stopped by verification.
00:00 Show Kickoff
00:08 Overemployed Meets Espionage
02:04 How the Laptop Proxy Scam Works
04:41 Interview Red Flags and Tests
08:22 AI Voice and Face Spoofing
09:13 Suspicious Joint Venture Email
10:57 Eye Drops Experiment Update
14:42 Fireflies Auto Join Mystery
18:20 Apple Threat Notifications Explained
22:33 Can Attackers Fake Apple Alerts
26:42 Lockdown Mode and Best Practices
28:28 Apple Emergency Resources
29:27 Handling Hard-to-Assess Clients
32:56 Jamf Response Playbook
34:50 Developer Mode Malware Evasion
36:46 Staying Ahead of Scams
38:10 Selling Awareness Training
39:45 KnowBe4 Campaigns and Phishing
45:10 Gift Card Scam Case Study
54:51 Phone-Level Limits and Wrap-Up
