WEBVTT
00:00:00.000 --> 00:00:05.919
Imagine it's a Tuesday night, you're clearing out your inbox before bed, and you see a subject line that stops your heart.
00:00:06.080 --> 00:00:11.119
It's not just a random string of text, it's your own email address staring back at you.
00:00:11.359 --> 00:00:15.599
Or maybe it's your own password, one you haven't used in years but recognize instantly.
00:00:15.839 --> 00:00:21.120
In some cases, it's both, a perfect match of your digital identity sitting right there in the subject line.
00:00:21.280 --> 00:00:23.120
The email starts with two words.
00:00:23.359 --> 00:00:24.640
Hello, pervert.
00:00:24.960 --> 00:00:27.120
Suddenly the room feels a little colder.
00:00:27.359 --> 00:00:33.439
Whether it's just your email, just a password, or a terrifying combination of both, the goal is the same.
00:00:33.679 --> 00:00:37.039
To make you believe the sender is already inside your life.
00:00:37.280 --> 00:00:40.320
They claim they've installed a Trojan on your machine.
00:00:40.479 --> 00:00:48.880
They say they've been watching you through your webcam for months and have a split screen video, one side showing what you were watching, and the other side showing you.
00:00:49.119 --> 00:00:56.560
They give you 48 hours to pay$1,500 in Bitcoin, or they'll blast that video to every single one of your contacts.
00:00:56.799 --> 00:01:01.679
Your stomach drops, you look at your laptop camera, you wonder, is this real?
00:01:02.159 --> 00:01:08.719
Welcome to the Pulse on Cyber, hosted by CJ Network Systems today, we're deconstructing the anatomy of a bluff.
00:01:08.879 --> 00:01:10.159
Let's breathe for a second.
00:01:10.319 --> 00:01:12.959
If you've received this email, you aren't alone.
00:01:13.200 --> 00:01:15.760
This is what we call a sex torsion scam.
00:01:15.920 --> 00:01:20.319
The hacker will use a subject line designed to trigger an immediate fight or flight response.
00:01:20.480 --> 00:01:24.959
They'll use something like security alert, your password is compromised.
00:01:25.280 --> 00:01:28.319
I have recorded you proof inside for your email.
00:01:28.719 --> 00:01:32.159
Seeing your specific email and password together is terrifying.
00:01:32.319 --> 00:01:35.760
But here is the reality: it doesn't mean you've been hacked.
00:01:36.000 --> 00:01:37.840
Think of it like a mail merge.
00:01:38.079 --> 00:01:43.120
You know when you get a physical letter from a car dealership that has your name and address printed on it?
00:01:43.359 --> 00:01:45.519
That salesman didn't break into your house.
00:01:45.680 --> 00:01:47.200
He just bought a mailing list.
00:01:47.359 --> 00:01:50.239
Scammers do the same thing with combo lists.
00:01:50.480 --> 00:01:53.200
These are huge files from old data breaches.
00:01:53.359 --> 00:01:57.760
Think LinkedIn, Adobe, or that old fitness app from 2019.
00:01:58.000 --> 00:02:04.239
They take your email and your old password and use a script to automatically plug them into these scary emails.
00:02:04.400 --> 00:02:07.120
But what about when the email says it's from you?
00:02:07.359 --> 00:02:08.960
That's called spoofing.
00:02:09.199 --> 00:02:15.120
It's the digital version of a prank caller changing their caller ID to make it look like the call is coming from inside the house.
00:02:15.360 --> 00:02:18.080
They are standing on your digital porch with a megaphone.
00:02:18.240 --> 00:02:20.159
They aren't actually in the house.
00:02:20.400 --> 00:02:22.080
Let's look at the technical claims.
00:02:22.240 --> 00:02:25.759
They usually say, I recorded you using a split screen interface.
00:02:26.000 --> 00:02:26.719
Wait a minute.
00:02:26.960 --> 00:02:34.400
Recording high-definition video from a webcam, syncing it with a screen recording, and then uploading that massive file without you noticing?
00:02:34.639 --> 00:02:36.240
That takes serious power.
00:02:36.479 --> 00:02:39.199
Your laptop fans would be spinning like a jet engine.
00:02:39.439 --> 00:02:41.120
Your internet would crawl.
00:02:41.360 --> 00:02:43.039
And the biggest red flag?
00:02:43.280 --> 00:02:44.319
Where is the proof?
00:02:44.560 --> 00:02:49.039
If I actually had a video that could ruin your life, I wouldn't just tell you I have it.
00:02:49.199 --> 00:02:50.560
I'd send a screenshot.
00:02:50.719 --> 00:02:53.599
These scammers never do because the video doesn't exist.
00:02:53.840 --> 00:02:57.680
They are betting on your guilt and your fear to do the work for them.
00:02:57.919 --> 00:03:02.879
They use buzzwords like RDP or keylogger just to sound scary.
00:03:03.039 --> 00:03:04.000
It's all noise.
00:03:04.240 --> 00:03:08.560
So, what is the tactical move when hello pervert lands in your inbox?
00:03:08.879 --> 00:03:10.000
Do not panic.
00:03:10.240 --> 00:03:12.000
Fear is the only way this works.
00:03:12.159 --> 00:03:16.560
Once you realize it's a mass marketing scam, the power shifts back to you.
00:03:16.879 --> 00:03:18.080
Audit your access.
00:03:18.319 --> 00:03:21.280
If you are still using that password anywhere, change it immediately.
00:03:21.520 --> 00:03:23.919
Get a password manager to handle the heavy lifting.
00:03:24.159 --> 00:03:25.360
Deploy MFA.
00:03:25.520 --> 00:03:29.280
Turn on multi-factor authentication, MFA on everything.
00:03:29.520 --> 00:03:33.599
Make it so that even if they have your password, they still can't get through the front door.
00:03:33.759 --> 00:03:34.639
Check the leaks.
00:03:34.800 --> 00:03:36.240
Head over to Have I Been Pond.
00:03:36.719 --> 00:03:40.719
Search your email, you'll see exactly which old company lost your data.
00:03:41.039 --> 00:03:42.560
The physical kill switch.
00:03:42.719 --> 00:03:45.680
Put a$2 sliding webcam cover over your lens.
00:03:45.840 --> 00:03:47.840
You can't hack a piece of plastic.
00:03:48.080 --> 00:03:50.639
If you found this episode helpful, do me a favor.
00:03:50.879 --> 00:03:55.199
Hit that subscribe button for the pulse on cyber on whatever platform you're listening on.
00:03:55.360 --> 00:03:59.919
And more importantly, share this podcast with a friend, a family member, or a coworker.
00:04:00.159 --> 00:04:02.400
Most people panic when they see these emails.
00:04:02.560 --> 00:04:07.840
Your one share could be the reason someone doesn't lose$1,500 to a scammer today.
00:04:08.080 --> 00:04:16.800
And if your business needs a partner to lock down its perimeter or build a platform that's secure from the ground up, reach out to us at CJ Network Systems.
00:04:17.040 --> 00:04:20.160
We don't just talk about security, we build it.
00:04:20.399 --> 00:04:23.759
I'm CJ, stay vigilant, and as always, keep your finger on the pulse.
00:00:00.000 --> 00:00:05.919
Imagine it's a Tuesday night, you're clearing out your inbox before bed, and you see a subject line that stops your heart.
00:00:06.080 --> 00:00:11.119
It's not just a random string of text, it's your own email address staring back at you.
00:00:11.359 --> 00:00:15.599
Or maybe it's your own password, one you haven't used in years but recognize instantly.
00:00:15.839 --> 00:00:21.120
In some cases, it's both, a perfect match of your digital identity sitting right there in the subject line.
00:00:21.280 --> 00:00:23.120
The email starts with two words.
00:00:23.359 --> 00:00:24.640
Hello, pervert.
00:00:24.960 --> 00:00:27.120
Suddenly the room feels a little colder.
00:00:27.359 --> 00:00:33.439
Whether it's just your email, just a password, or a terrifying combination of both, the goal is the same.
00:00:33.679 --> 00:00:37.039
To make you believe the sender is already inside your life.
00:00:37.280 --> 00:00:40.320
They claim they've installed a Trojan on your machine.
00:00:40.479 --> 00:00:48.880
They say they've been watching you through your webcam for months and have a split screen video, one side showing what you were watching, and the other side showing you.
00:00:49.119 --> 00:00:56.560
They give you 48 hours to pay$1,500 in Bitcoin, or they'll blast that video to every single one of your contacts.
00:00:56.799 --> 00:01:01.679
Your stomach drops, you look at your laptop camera, you wonder, is this real?
00:01:02.159 --> 00:01:08.719
Welcome to the Pulse on Cyber, hosted by CJ Network Systems today, we're deconstructing the anatomy of a bluff.
00:01:08.879 --> 00:01:10.159
Let's breathe for a second.
00:01:10.319 --> 00:01:12.959
If you've received this email, you aren't alone.
00:01:13.200 --> 00:01:15.760
This is what we call a sex torsion scam.
00:01:15.920 --> 00:01:20.319
The hacker will use a subject line designed to trigger an immediate fight or flight response.
00:01:20.480 --> 00:01:24.959
They'll use something like security alert, your password is compromised.
00:01:25.280 --> 00:01:28.319
I have recorded you proof inside for your email.
00:01:28.719 --> 00:01:32.159
Seeing your specific email and password together is terrifying.
00:01:32.319 --> 00:01:35.760
But here is the reality: it doesn't mean you've been hacked.
00:01:36.000 --> 00:01:37.840
Think of it like a mail merge.
00:01:38.079 --> 00:01:43.120
You know when you get a physical letter from a car dealership that has your name and address printed on it?
00:01:43.359 --> 00:01:45.519
That salesman didn't break into your house.
00:01:45.680 --> 00:01:47.200
He just bought a mailing list.
00:01:47.359 --> 00:01:50.239
Scammers do the same thing with combo lists.
00:01:50.480 --> 00:01:53.200
These are huge files from old data breaches.
00:01:53.359 --> 00:01:57.760
Think LinkedIn, Adobe, or that old fitness app from 2019.
00:01:58.000 --> 00:02:04.239
They take your email and your old password and use a script to automatically plug them into these scary emails.
00:02:04.400 --> 00:02:07.120
But what about when the email says it's from you?
00:02:07.359 --> 00:02:08.960
That's called spoofing.
00:02:09.199 --> 00:02:15.120
It's the digital version of a prank caller changing their caller ID to make it look like the call is coming from inside the house.
00:02:15.360 --> 00:02:18.080
They are standing on your digital porch with a megaphone.
00:02:18.240 --> 00:02:20.159
They aren't actually in the house.
00:02:20.400 --> 00:02:22.080
Let's look at the technical claims.
00:02:22.240 --> 00:02:25.759
They usually say, I recorded you using a split screen interface.
00:02:26.000 --> 00:02:26.719
Wait a minute.
00:02:26.960 --> 00:02:34.400
Recording high-definition video from a webcam, syncing it with a screen recording, and then uploading that massive file without you noticing?
00:02:34.639 --> 00:02:36.240
That takes serious power.
00:02:36.479 --> 00:02:39.199
Your laptop fans would be spinning like a jet engine.
00:02:39.439 --> 00:02:41.120
Your internet would crawl.
00:02:41.360 --> 00:02:43.039
And the biggest red flag?
00:02:43.280 --> 00:02:44.319
Where is the proof?
00:02:44.560 --> 00:02:49.039
If I actually had a video that could ruin your life, I wouldn't just tell you I have it.
00:02:49.199 --> 00:02:50.560
I'd send a screenshot.
00:02:50.719 --> 00:02:53.599
These scammers never do because the video doesn't exist.
00:02:53.840 --> 00:02:57.680
They are betting on your guilt and your fear to do the work for them.
00:02:57.919 --> 00:03:02.879
They use buzzwords like RDP or keylogger just to sound scary.
00:03:03.039 --> 00:03:04.000
It's all noise.
00:03:04.240 --> 00:03:08.560
So, what is the tactical move when hello pervert lands in your inbox?
00:03:08.879 --> 00:03:10.000
Do not panic.
00:03:10.240 --> 00:03:12.000
Fear is the only way this works.
00:03:12.159 --> 00:03:16.560
Once you realize it's a mass marketing scam, the power shifts back to you.
00:03:16.879 --> 00:03:18.080
Audit your access.
00:03:18.319 --> 00:03:21.280
If you are still using that password anywhere, change it immediately.
00:03:21.520 --> 00:03:23.919
Get a password manager to handle the heavy lifting.
00:03:24.159 --> 00:03:25.360
Deploy MFA.
00:03:25.520 --> 00:03:29.280
Turn on multi-factor authentication, MFA on everything.
00:03:29.520 --> 00:03:33.599
Make it so that even if they have your password, they still can't get through the front door.
00:03:33.759 --> 00:03:34.639
Check the leaks.
00:03:34.800 --> 00:03:36.240
Head over to Have I Been Pond.
00:03:36.719 --> 00:03:40.719
Search your email, you'll see exactly which old company lost your data.
00:03:41.039 --> 00:03:42.560
The physical kill switch.
00:03:42.719 --> 00:03:45.680
Put a$2 sliding webcam cover over your lens.
00:03:45.840 --> 00:03:47.840
You can't hack a piece of plastic.
00:03:48.080 --> 00:03:50.639
If you found this episode helpful, do me a favor.
00:03:50.879 --> 00:03:55.199
Hit that subscribe button for the pulse on cyber on whatever platform you're listening on.
00:03:55.360 --> 00:03:59.919
And more importantly, share this podcast with a friend, a family member, or a coworker.
00:04:00.159 --> 00:04:02.400
Most people panic when they see these emails.
00:04:02.560 --> 00:04:07.840
Your one share could be the reason someone doesn't lose$1,500 to a scammer today.
00:04:08.080 --> 00:04:16.800
And if your business needs a partner to lock down its perimeter or build a platform that's secure from the ground up, reach out to us at CJ Network Systems.
00:04:17.040 --> 00:04:20.160
We don't just talk about security, we build it.
00:04:20.399 --> 00:04:23.759
I'm CJ, stay vigilant, and as always, keep your finger on the pulse.
