Hacking the Human Mind: How Cyber Attackers Exploit Our Brains

DISCARDED: Tales From the Threat Research Trenches

Hello to all our cyber squirrels! Joining our series host, Selena Larson, is our co-host today, Tim Kromphardt. Together they welcome our special guest–Dr. Bob Hausmann, Proofpoint's Manager of Learning Architecture and Assessments and a seasoned psychologist.
Our conversation explores how cyber threat actors exploit the different systems of thought in our brains and how attackers leverage our rapid, emotionally-driven responses (system one thinking) to bypass our more deliberate, rational processes (system two thinking).
Dr. Bob introduces us to the concept of cognitive biases, particularly normalcy bias, and how these mental shortcuts can shape our cyber defense strategies. He explains how organizations often fall into the trap of thinking "it won't happen to us," leading to underinvestment in critical security measures. Drawing parallels to historical events like the sinking of the Titanic and the COVID-19 pandemic, he underscores the importance of overcoming these biases to enhance preparedness.
We also talk about:

• Real-world implications and examples of social engineering attacks.
• The impact of urgency and stress on decision-making in cybersecurity.
• The alarming rise and mechanics of pig butchering scams.
• The role of AI in scams and cybersecurity
• Empathetic approaches to helping scam victims

Resources mentioned:

• Book: "Thinking, Fast and Slow" by Daniel Kahneman

• Book: "The Art of Deception" by Kevin Mitnick

• Previous Discarded Episode on Pig Butchering

• Have I Been Pwned

• PhishMe

• Cybersecurity and Infrastructure Security Agency (CISA)

• SANS Institute

• https://www.proofpoint.com/us/blog/threat-insight/broken-dreams-and-piggy-banks-pig-butchering-crypto-fraud-growing-online

• https://therecord.media/southeast-asian-scam-syndicates-stealing-billions-annually

• https://www.cfr.org/in-brief/how-myanmar-became-global-center-cyber-scams

• https://www.proofpoint.com/us/blog/threat-insight/dont-answer-russia-aligned-ta499-beleaguers-targets-video-call-requests
  

For more information about Proofpoint, check out our website.
Subscribe & Follow:
Don't miss out on future episodes—subscribe to the Discarded Podcast on your favorite platform.