Confessions of a Former Intelligence Officer

Sep 20, 2023

Former US Intelligence Officer, a former US Army Intelligence Officer and interrogator, discusses social engineering strategies employed by threat actors and shares real accounts of interrogations. The episode provides a different perspective on social engineering methods to better protect against bad actor attacks.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

Rapport Beats Force

Interrogation relies on building relationships, not physical coercion or theatrics.
Many social skills used in sales are directly applicable to intelligence collection.

INSIGHT

Language And Emotion Unlock Trust

Social engineers combine emotional triggers with authentic organizational language to bypass resistance.
Doing homework on an organization's vocabulary and culture makes human-targeted attacks far more convincing.

ADVICE

Watch For Opening Cues

Watch for body language and elaboration as signs someone is opening up.
If answers lengthen and detail increases, pivot to gather the critical information quickly.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

There has been a giant spotlight shining on cybersecurity at Las Vegas casinos. Recently a hacking group pretended to be an IT support employee with Caesars Entertainment, Inc. and gained access to the company's computer systems. Hackers made off with Social Security numbers and driver’s license numbers from a “significant number” of loyalty program customers.

Social engineering attacks exploit the weakest link in cybersecurity: the human.

In this episode of Privacy Files, we talk to a former US Army Intelligence Officer who once served as an interrogator.

For years he interviewed detainees and informants during a time of war.

While he functioned as a good actor, he also leveraged many of the social engineering strategies employed by the modern threat actor.

You will hear real accounts of interrogations and how an intelligence officer navigates difficult interactions to collect vital information that can save lives.

Whether you are an individual concerned about phishing attacks on your financial accounts or a cybersecurity professional guarding vast amounts of critical company data, this episode will provide you with a different perspective on social engineering methods so you can better protect against bad actor attacks.

OUR SPONSORS:

Anonyome Labs - Makers of MySudo and Sudo Platform. Take back control of your personal data. www.anonyome.com

MySudo - The world's only all-in-one privacy app. Communicate and transact securely and privately. Talk, text, email, browse, shop and pay, all from one app. Stay private. www.mysudo.com

MySudo VPN - No personal information required to sign up. You don't even need a username and password. Finally, a VPN that is actually private. https://mysudo.com/mysudo-vpn/

Sudo Platform - The cloud-based platform companies turn to for seamlessly integrating privacy solutions into their software. Easy-to-use SDKs and APIs for building out your own branded customer apps like password managers, virtual cards, private browsing, identity wallets (decentralized identity), and secure, encrypted communications (e.g., encrypted voice, video, email and messaging). www.sudoplatform.com