- 9 minutes 20 secondsspearphishing (noun) [Word Notes]
Please enjoy this encore of Word Notes.
A type of cyber attack where an attacker sends a targeted and personalized email or other form of communication to a specific individual or a small group of individuals with the intention of tricking them into divulging sensitive information, such as a password, or convincing them to click a malicious link that will enable the attacker to take control of the victim's machine.
CyberWire Glossary link: https://thecyberwire.com/glossary/spearphishing
Audio reference link: Richardson, T., 2014. What is the difference between phishing and spear-phishing? [Video]. YouTube. URL www.youtube.com/watch?v=Wpx5IMduWX4.
11 August 2026, 7:00 am - 51 minutes 23 secondsCosmic brownie crimes.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up after a listener asks Joe to finally reveal the backpack that's become a recurring character on the show—and whether it's really as airport-infeding as everyone says. Joe covers Myanmar's approval of the death penalty for convicted scammers and shares a real-world fraud case involving forged Little Debbie snack deliveries that shows scams don't always happen online. Maria explores the rise in foreclosure rescue and equity-stripping scams, where fraudsters target financially vulnerable homeowners and attempt to steal their money—or even their homes. Dave breaks down new research showing how AI-powered phone farms are making it easier than ever for scammers to automate fraud, manage hundreds of fake accounts, and scale their operations with minimal technical skill. Our Catch of the Day is on a scam-baiting exchange featuring an unforgettable tale of a supposed two-timing "Barb Johnson" that quickly spirals into absurdity.
Resources and links to stories:
- Kitchen Sink Backpack
- Giant Backpack
- Your Backpack Got Worse On Purpose
- Burma approves death penalty for scammers months after FBI's $8 billion crypto crackdown
- Little Debbie snack fraud investigation leads to arrest of West Virginia man, who allegedly forged records for deliveries that never happened
- As foreclosures increase, so do warnings about some self-proclaimed 'home savers'
- Researchers Warn of AI-Enhanced Phone Fraud Ecosystem
- That Twotiming B**ch Barb Johnson
Have a Catch of the Day you'd like to share? Email it to us at [email protected].
6 August 2026, 5:00 am - 49 minutes 58 secondsClass is in session—for cybercriminals. [OMITB]
Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by her co-hosts N2K Networks Dave Bittner and Keith Mularski, former FBI cybercrime investigator and now Chief Global Ambassador at Qintel.
Being a security researcher is a bit like being a detective: you gather clues, analyze the evidence, and consult the experts to solve the cyber puzzle. This week, Today, while Keith is off, Dave and Selena kick off a back-to-school special, exploring the cyber threats students, parents, educators, and universities should have on their radar. They examine the rise in job scams targeting university communities, discuss recent espionage activity aimed at higher education institutions in the U.S. and Canada, and look at how cybercriminals prey on younger audiences through online games, YouTube, and social media. From fake game cracks delivering information stealers to sextortion schemes targeting teens, they break down the tactics attackers are using and share practical advice for staying safe as the new school year begins.
Sources:
4 August 2026, 7:00 am - 9 minutes 15 secondsresiliency (noun) [Word Notes]
Please enjoy this encore of Word Notes.
The ability to continuously deliver the intended outcome despite adverse cyber events.
CyberWire Glossary link: https://thecyberwire.com/glossary/resiliency
Audio reference link: Cameron, J., 1984. The Terminator [Movie]. IMDb. URL www.imdb.com/title/tt0088247/.
Clip Nation, 2012. The Arnold Schwarzenegger “I’ll Be Back” Supercut [Video]. YouTube. URL www.youtube.com/watch?v=-YEG9DgRHhA.
Coops, C., 2013. Terminator 2 Theme [Video]. YouTube. URL www.youtube.com/watch?v=pVZ2NShfCE8.
4 August 2026, 7:00 am - 39 minutes 16 secondsNothing but the spoof.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up on Joe's chicken coop project. Dave covers a new FBI warning about scammers impersonating FBI agents and the IC3 to target fraud victims a second time with convincing deepfakes, fake websites, and recovery scams. Joe shares the story of a retired man who lost £1,800 after two scammers worked together to convince him they were protecting his Amazon account from fraud. Maria breaks down a new UN report revealing that scam networks stole up to $114 billion across Asia-Pacific in 2025 and are evolving into global criminal enterprises powered by specialization and AI. Our Catch of the Day comes from a listener who blames being left unsupervised for one of the funniest scam-baiting exchanges we've seen yet.
Resources and links to stories:
- Fake FBI Agents Use IC3 Complaint Scams to Target Fraud Victims
- Amazon scam was so authentic - it got the better of me
- Crime gangs snare more than $88 billion in scams in Asia-Pacific, UN says
Have a Catch of the Day you'd like to share? Email it to us at [email protected].
30 July 2026, 5:00 am - 10 minutes 7 secondsSecurity Operations Center (SOC) (noun) [Word Notes]
Please enjoy this encore of Word Notes.
A centralized facility or team responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents within an organization.
CyberWire Glossary link: https://thecyberwire.com/glossary/security-operations-center
Audio reference link: AT&T Tech Channel, 2012. A tour of AT&T’s Network Operations Center (1979) [Video]. YouTube. URL www.youtube.com/watch?v=cigc3hvMyWw.
28 July 2026, 7:00 am - 49 minutes 24 secondsRed flags ahead.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up as Joe corrects the record on router end-of-support after a listener points out that manufacturers like Netgear don't intentionally disable routers when support ends, and we also share a listener-submitted business email compromise case that highlights the importance of independently verifying payment requests. Maria covers how scammers can accidentally reveal themselves by mispronouncing local place names, turning a convincing jury duty scam into an obvious fake. Joe shares how a veteran CBS News journalist who regularly reports on scams nearly fell victim to an elaborate bank impersonation scheme, showing that anyone can be targeted. Dave reflects on a listener's "Unknown Situation. Shields Up." philosophy, encouraging people to slow down and verify unexpected communications before taking action. Our Catch of the Day is on an over-the-top scam email from a self-proclaimed internet fraudster claiming to be giving away millions in a last-minute bid for forgiveness.
Resources and links to stories:
- Anne Arundel County woman spots jury duty phone scam after caller mispronounces local names
- A CBS journalist who covers scams rushed to his bank to withdraw money after nearly falling for an imposter scam
Have a Catch of the Day you'd like to share? Email it to us at [email protected].
23 July 2026, 5:00 am - 6 minutes 1 secondhunt forward operations (noun) [Word Notes]
Please enjoy this encore of Career Notes.
Defensive cyber operations carried out by U.S. Cyber Command's Cyber National Mission Force, CNMF at the request of allied nations.
CyberWire Glossary link: https://thecyberwire.com/glossary/hunt-forward-operation
Audio reference link: Paul Nakasone, G., 2022. Vanderbilt Summit Keynote [Video]. YouTube. URL www.youtube.com/watch?v=Axg4s9l9wi0.
21 July 2026, 7:00 am - 39 minutes 31 secondsCaught on ScamTok
This week, while Maria is out hosts Dave Bittner and Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Dave covers a phishing campaign using fake Facebook verification emails to trick users into handing over their account credentials. Joe highlights the Better Business Bureau's new Scam Tracker heat map for visualizing scam trends and discusses a global INTERPOL operation that led to thousands of arrests and hundreds of millions of dollars in seized fraudulent funds. Our Catch of the Day is on a scam-baiter who encounters a hilariously inept TikTok scam account, proving that not every scammer is a master criminal.
Resources and links to stories:
- Phishing Attacks Targeted Facebook Users With Fake Verification Offer
- Heatmap
- Over 5,800 arrests, USD 293 million intercepted in global fraud bust
- These TikTok scam accounts are literally so stupid
Have a Catch of the Day you'd like to share? Email it to us at [email protected].
16 July 2026, 5:00 am - 8 minutes 14 secondsCyber gravity (noun) [Word Notes]
The invisible force that governs the movement of data across networks.
Audio reference link: “Things to Come 1936 - HG Wells.” YouTube, YouTube, 28 Sept. 2011, https://www.youtube.com/watch?v=atwfWEKz00U.
14 July 2026, 7:00 am - 47 minutes 38 secondsWood you fall for this?
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up after a listener wrote in to share their love of X Japan, joking that the show should spend less time talking about chickens and more time celebrating one of Japan’s most legendary metal bands. Joe covers how millions of compromised consumer devices are fueling massive residential proxy networks that cybercriminals and nation-state actors use to disguise malicious activity online. Dave looks at a ransomware campaign using fake INTERPOL emails to pressure victims into opening malicious attachments and infecting their systems. Maria explores whether AI-powered operating systems could one day become our first line of defense against scams by detecting social engineering attacks before users ever fall for them—and what new risks that future could bring. Our catch of the day is on an unsolicited Telegram message that quickly turns into an entertaining romance scam encounter.
Resources and links to stories:
- X Japan - Kurenai Live 1989 (Blue Blood Tour - 爆発寸前GIG)
- How Hackers Found a Back Door Into the American Living Room
- A Sneaky Back Door Lets Hackers Into Your Home. Here’s How to Protect Yourself.
- 50.147.72.126
- Fake Interpol investigation emails target small businesses with ransomware
- The Beginning of the End of Social Engineering
- Polish Frank part 1. He had me at the bush.
Have a Catch of the Day you'd like to share? Email it to us at [email protected].
9 July 2026, 5:00 am - More Episodes? Get the App