Easy Prey1 Sep 2021

Social Engineering and Pick-Pocketing with Chris Kirsch

Gifted pick-pocketers can use social engineering skills to choose their victims. Many times as we travel, we may not realize that our body language makes us an easy target.

Today's guest is Chris Kirsch. Chris is the CRO and co-founder of Rumble. With a background in product marketing and technical mindset, he has helped formulate go-to marketing strategies at PGP, Rapid7, and Veracode. In 2017, he earned the black badge for winning the social engineering capture the flag competition at DEFCON. He has a passion for InfoSec, OSINT, and is a volunteer advisor for the National Child Protection Task Force.

Show Notes:

[1:05] - Welcome Chris! Chris shares his background.
[2:20] - Chris co-founded Rumble, an asset discovery company to help clients secure their network.
[3:48] - Pick-pocketers are masters of misdirection.
[6:34] - Chris explains why he got into the social engineering side of DEFCON.
[8:18] - When in Paris, Chris's father was pick-pocketed which prompted him to start researching.
[11:18] - After meeting a magician at a convention, Chris then became interested in open-source intelligence (OSINT).
[11:51] - Chris defines the difference between the two schools of thought on pick-pocketing.
[13:29] - Some pick-pocketers can steal without interacting with people while others utilize social interactions.
[15:31] - Chris shares in more detail the story of his father being pick-pocketed.
[17:38] - This experience showed Chris and his family a way that teams of people can work together to fool a target.
[20:03] - There are some unusual laws that limit consequences for theft.
[21:50] - Chris shares tips on where to place your wallet when traveling and demonstrates a scenario.
[25:18] - Escalators are areas where pick-pocketing teams can be very successful.
[28:17] - Placing your hand in your pocket to intentionally keep your belongings safe might actually make you a target.
[30:31] - When something else is on your mind, you are an easy target. It is hard to always be aware.
[33:19] - Chris uses an example of a phishing scam that demonstrates social engineers move you from rational thinking to emotional.
[36:20] - Many people take these scams personally when in reality, scammers have no idea who you are.
[38:27] - Chris references a documentary from the point of view of a social engineering target.
[40:51] - Darren Brown on YouTube and Netflix has several videos and shows that demonstrate the psychology of many scams and manipulation.
[43:59] - The sample you are seeing is what the person wants you to see.
[45:12] - Chris gives actionable steps to take when feeling suspicious.
[47:09] - Chris describes a time when he was able to use social engineering strategies that would have been shot down if the target had done something simple.
[49:21] - For the "long con" scammers, Chris has advice about trust.
[51:42] - Search for Kirsch Identity Fraud and you find free resources on identity theft.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(342)

Hidden Phone Tracking

Your phone gives off a surprising amount of information just by being connected to a cellular network. Things like your location, who you communicate with, and your daily patterns can all become part ...

23 Sep 45min

Ransomware Evolution

Ransomware has changed dramatically over the years. What started as criminals locking up individual computers and demanding relatively small payments has grown into a much larger operation involving s...

16 Sep 40min

The Counterfeit Economy

A counterfeit handbag may leave someone disappointed. A counterfeit medication, airbag, or child's car seat can do far more damage. Fake products now reach into nearly every part of daily life, and ma...

9 Sep 43min

The Internet is Playing You

A convincing lie no longer needs to look suspicious. It can appear in a familiar social media feed, come from someone who seems real, or arrive as a video that looks almost impossible to fake. By the ...

2 Sep 44min

The Psychology of Yes

It is easy to say you would never fall for a scam when you are looking at the situation from the outside. In the moment, though, things can feel much less obvious. A request may sound reasonable, the ...

26 Aug 49min

Drink Spiking

A drink can be out of your sight for only a moment, but that may be all it takes for someone to tamper with it. Spiking can happen in bars, restaurants, festivals, and even among people who already kn...

19 Aug 35min

Love, Lies and Locked Up

What sounds like the plot of a crime thriller was Sharon Armstrong's real life. An online romance drew her into an elaborate web of lies involving overseas contracts, invented emergencies, and several...

12 Aug 52min

The Recruitment Trap

Everybody is searching for ways to increase income. Unfortunately, MLMs often look like an easy way to start a business without taking on the cost of a traditional company. The pitch sounds simple. Bu...

5 Aug 51min