686: North Korean Remote Job Infiltration, Apple Threat Alerts, and Stopping Gift Card Scams
Joe and Sam discuss a Wall Street Journal documentary on North Korean operatives using stolen identities, AI tools, and U.S. accomplices to gain remote jobs at American companies, including schemes where U.S.-based helpers host shipped laptops for overseas workers, raising financial and data-leak risks. They note interview red flags, AI face/voice masking, and an email pitch offering a U.S. partner for a 50/50 split. Sam updates on trying FDA-approved Closee eye drops for age-related vision issues, finding partial improvement but stopping due to itching/burning and concern over past side effects. They troubleshoot Fireflies AI auto-joining meetings via default settings after easy "Sign in with Microsoft" onboarding. Joe reviews Apple threat notifications, Lockdown Mode effectiveness, verification via account.apple.com, and Consumer Reports resources. Sam outlines KnowBe4 security awareness training and shares a near-miss CEO text gift-card scam stopped by verification. 00:00 Show Kickoff 00:08 Overemployed Meets Espionage 02:04 How the Laptop Proxy Scam Works 04:41 Interview Red Flags and Tests 08:22 AI Voice and Face Spoofing 09:13 Suspicious Joint Venture Email 10:57 Eye Drops Experiment Update 14:42 Fireflies Auto Join Mystery 18:20 Apple Threat Notifications Explained 22:33 Can Attackers Fake Apple Alerts 26:42 Lockdown Mode and Best Practices 28:28 Apple Emergency Resources 29:27 Handling Hard-to-Assess Clients 32:56 Jamf Response Playbook 34:50 Developer Mode Malware Evasion 36:46 Staying Ahead of Scams 38:10 Selling Awareness Training 39:45 KnowBe4 Campaigns and Phishing 45:10 Gift Card Scam Case Study 54:51 Phone-Level Limits and Wrap-Up