Security BSides Las Vegas 2025

(03) The Remote Grift: Cunning Meets Naivete, and the Victims Become the Criminals
2025-08-04 , Misora

For DFIR professionals, the remote grift is no mystery. It’s a hybrid crime, blending an old-fashioned con with technical tools. The grifter is cunning. The victim is trusting – a classic “mark.” The grifter manipulates the mark, who unknowingly commits a crime. The only fingerprints at the scene belong to the mark.

We’ll explore several real-life incident responses where the victim ended up in handcuffs. We’ll reveal details that don’t make the headlines.

It’s a grave injustice, and today’s security awareness training is partly to blame. Yes, the training has done its job (awareness is raised). But it’s mostly stuck on yesterday’s “high-tech crimes.” It’s become an exercise in checkbox security, prioritizing “don’t click” over gut instinct and human psychology.

Basic tech-focused training should not be abandoned, but employees clearly dread current versions. Many view it as a waste of time. New training materials must recapture their attention, hitting hard on the human element. To empower the user against deception, training should engage both the brain and the gut. We’ll discuss a formula to “humanize” security training, making it both more compelling and effective.


n/a