OmarTodd

Nobody hacked the CFO who wired $2 million to a scammer last month. They just called him, in his CEO's voice. AI voice cloning has made "I heard it with my own ears" worthless. Trust itself is now the attack surface. I spent 30 years running technology against real adversaries. Now I break down how AI is being weaponized against people and businesses, and what to do about it. Full breakdown on my channel. Link below. youtube.com/watch?v=4fLqLVEE…

A or B? Your boss emails about a confidential payment. Then calls. Sounds exactly like them. Then a "lawyer" confirms. A) Pay it B) Ring back on a number I already have US prosecutors allege AI voices took $129m this way (per AP). I'm B. You?

Where are your 2FA recovery codes right now? A) On paper B) In my password manager C) On the phone I'd lose D) What codes? Honest answers only.

Hot take: the person most likely to fall for an AI voice clone scam isn't your nan. It's the confident 30 year old who says they'd never fall for it. A) Older people B) The confident ones A or B?

2FA is just your phone asking "are you sure it's you?" six times an hour. Fine, until the phone goes in the sea. Then who proves it's you? Recovery codes. On paper. Not on the phone. Got yours?

Companies warn you about a breach by email. Scammers know that. So a breach email is the one email I never click through. I type the site in myself. Ever clicked one anyway?

A friend wants to hold their own Bitcoin. Hardware wallet, seed phrase, the lot. A) Too hard for most people B) We're just bad at teaching it I say B. A or B?

Hot take: the breach isn't the dangerous bit. The follow-up email is. DreamHost told customers hackers got in (per TechRadar). Scammers love to follow that with a fake "secure your account" email in the real logo. Tap the link or type the site yourself?

A real booking reference in an email proves nothing. Scammers can quote it too. Open the airline app yourself. Takes ten seconds.

Hot take: a breach with no card numbers is still a serious breach. The next step is a scam email quoting your real booking reference, and it looks like service. Agree or disagree?

A or B? An email says: "Your flight has changed. Confirm your booking." It even quotes your real booking reference. A) Click, it knows my details B) Open the airline app myself Several airlines say Amadeus was breached (per Malay Mail). I'm B. You?

The process only one person understands is the first thing to break when you cut them. Most common answer I expect to "how many of those do you have?": "all of them." Guilty?

Company swaps its finance team for an AI agent. Months later the agent pays a fake invoice. Whose fault? A) The vendor B) The boss who cut the people I know my answer. A or B?

Hot take: cutting a job for AI is the easy bit. Keeping what that person knew is the hard bit. A Robert Half survey (per IBTimes UK) says 32% of 2,000 US managers cut a role for AI, then hired for it again. Top reason: lost know-how. Cut first, or map the know-how first?

The Quick Assist code is the new password. Most common answer I expect: "I'd never read it out." Would you, if they sounded like IT and used your company's name?

Hot take: if you didn't start the support chat, treat it as a scam until proven otherwise. Even if it says IT. Even if it knows your name. Paranoid or sensible?

A or B? A Teams message says: "Hi, IT here. Open Quick Assist and read me the code." A) Fine, it's IT B) Ring IT on a number I already have Microsoft just detailed two intrusions that started this way. I'm B. You?

Cover or no cover, a frozen week is still a frozen week. Most common answer I expect: "I'd be fine." Would you?

An exchange pauses withdrawals for days after a theft, then promises to cover users. A) Wait it out B) Move your coins out the day it reopens I know what I'd be tempted to do. A or B?

Hot take: the Binance hack doesn't prove exchanges are scams. It proves "trust us" isn't a security control. Binance says it will cover users (per Euronews). Good. But withdrawals were still paused for days. Would that matter to you? Yes or no?