Firewalls Don't Stop Dragons Podcast 🎧 How The Bad Guys Trick You Into Taking Their Bait
Mar 15, 2017
Chris Romeo, co-founder and CEO of Security Journey and veteran security practitioner, explains how phishing works and why it keeps growing. He breaks down how attackers mimic trusted brands and exploit emotions. They cover spear phishing, malware and ransomware ties, plus practical defenses like two-factor, password managers, and targeted education for kids and seniors.
AI Snips
Chapters
Transcript
Episode notes
Drone Headlines Miss The Malware Prerequisite
- The drone-hard-drive-light story was clickbait; researchers demonstrated a proof-of-concept but only after first installing malware to control the blinking light.
- Kerry Parker warns headlines often omit that the attack required prior compromise, so the blinking LED alone doesn't leak secrets.
Enable Two Factor Authentication Everywhere
- Enable two-factor authentication (2FA) on important accounts to stop attackers who obtain passwords from logging in.
- Chris Romeo explains common 2FA flows: a password plus a text code or authenticator app code tied to your phone.
Assume Phishers Rely On Low Click Rates
- Treat phishing as a numbers game: mass campaigns cost little and even low click rates yield big returns for attackers.
- Verizon's phishing tests found 30% open rate and 12% click rate across 8 million simulated emails.