Video breakdowncase breakdown
The WhatsApp Giveaway With an Unpaid Internship
A fake giveaway asks for your phone number, then makes sharing the offer part of qualifying. Before a prize arrives, you have already become its unpaid marketing team.
Case library
Where digital incidents meet human behavior.
Search and filter the published collection. Sample entries are clearly marked until Connor-approved scripts, research, and citations replace them.
15 cases
Showing all 15 published cases.
Video breakdownRead the breakdown
Video breakdowncase breakdown
The Real Login Page Was Part of the Scam - Microsoft
The Microsoft page was real. The story that sent you there was not. A code presented as the way to open a document could instead sign an attacker into your account.
Video breakdowncase breakdown
This Scam Comes With Homework - Google Calendar
An unexpected invitation can feel like a real obligation once it lands on your calendar. Check who put it there before doing homework for a meeting you never agreed to.
Video breakdowncase breakdown
It Blocked Ads... and Shared Your Account Access - Twitch
The Twitch extension really did make streams better. That did not answer a separate question: what was it doing with users' account access? A useful feature and a security problem can exist at the same time.
Video breakdowncase breakdown
Prove You're Human... Install This Malware - ClickFix
A familiar website check turns into a request to run a computer command. The trick depends on you treating a very different task like the same old interruption. You do not need to know code to know where to stop.
Video breakdowncase breakdown
You're the First Heist... GTA 6
A fake GTA 6 leak warns you about scammers while trying to scam you. The useful question is not how much you want the offer to be real, but who has actually verified it.
Video breakdowncase breakdown
These Hackers Didn’t Break In... They Got Hired - North Korea’s Fake Workers
Recorded Future says likely North Korean remote workers used fabricated identities, AI tools, and real technical skills to get through hiring. A believable applicant is not automatically a verified applicant.
Video breakdowncase breakdown
Thousands of Leaked Cloud Keys Still Work... The AWS Access Key Problem
Thousands of AWS access keys found in public sources still opened the cloud accounts behind them. Removing a leaked key from view does not make the key stop working.
Video breakdowncase breakdown
The “Rescue” Was Another Ransom... Inside Ransom Busters
GuidePoint says a supposed ransomware-recovery service contacted victims before some incidents were public. Accurate details can prove access without proving that the person offering help is trustworthy.
Video breakdowncase breakdown
The Internet Still Trusts Dead Websites - Sable Squirrel’s 10,000-Domain Network
Sable Squirrel controls more than 10,000 domains, many acquired after earlier owners let them expire. A familiar address can keep its reputation even when the person behind it has completely changed.
Video breakdowncase breakdown
Everyone Was Responsible. So No One Responded. — The ACRO Cyberattack
ACRO had patches available, security alerts firing, and several providers in the picture. The documented failure was not only technical: responsibility for monitoring, patching, and escalation was unclear.
Video breakdowncase breakdown
The Medical Scam That Knows Your Real Information
Madera Community Hospital’s notice shows how accurate personal and health details can make a false approach feel pre-verified. The safer habit is to verify healthcare requests through a separate channel you control.
Video breakdowncase breakdown
The Door Was Never Locked
Anthropic’s Claude models reached real systems during controlled cybersecurity evaluations because an intended simulation retained live internet access. The lesson is not simply that the models crossed a line. It is that the environment did not technically enforce the line.
case breakdowndemo
The Rushed Reset: A Composite Help-Desk Impersonation
A demonstration case showing how urgency and borrowed authority can pressure an employee into approving a fraudulent account reset.
case breakdowndemo
A Familiar Face in the Inbox: A Composite Payment Request
A demonstration case exploring how visual familiarity and trust transfer can make an unusual payment request feel routine.