Easy Prey
Aging parents often rely on the people closest to them for help, but what happens when that help becomes a way to take control? For Charles Wallace, the warning signs started small. His mother’s fridge was suddenly overfilled. A caregiver refused to provide receipts. Spending patterns began to shift in ways that did not make sense. At the time, each concern could be explained away. Looking back, they were part of something much larger. Charles spent 15 years in banking and finance, and after his mother’s death, he used that experience to reconstruct more than 3,000 transactions. What he...
info_outlineEasy Prey
The world of art theft looks glamorous in the movies, but the reality is far more complicated. From multi-million dollar forgery schemes to undercover FBI operations recovering stolen national treasures, art crime is a global industry hiding in plain sight. This conversation digs into how these crimes actually play out and why the people who pull them off often end up stuck with the very pieces they thought would make them rich. My guest today is Robert Wittman, a former FBI special agent and the founder of the FBI’s Art Crime Team. Over a 20-year career, he worked undercover in more...
info_outlineEasy Prey
We make predictions all the time including about the weather, about traffic, about what someone is going to say next. It feels natural, even rational. But when algorithms start making predictions about us, whether we'll repay a loan, reoffend after prison, or respond to a medical treatment, something fundamental shifts. The forecast stops being a guess and starts becoming a verdict. My guest today is Carissa Veliz, a philosopher and associate professor at the University of Oxford, where she also researches at the Oxford Internet Institute. Her work focuses on the ethics of technology, privacy,...
info_outlineEasy Prey
Online security advice often sounds simple until you actually try to follow it. Between password managers, privacy settings, and data brokers, protecting yourself can start to feel like a full-time job. That gap between what sounds easy and what’s actually realistic is where a lot of people get stuck. My guest today is Yael Grauer, a freelance investigative technology reporter who covers privacy, security, digital freedom, hacking, and mass surveillance. She also works as a program manager of cybersecurity research at Consumer Reports, where she manages Security Planner, a free resource that...
info_outlineEasy Prey
It’s easy to think scams only work when someone misses something obvious. In reality, most of them don’t look obvious at the start. They show up as normal situations with just enough friction to notice, but not enough to stop. That small gap is where people tend to move forward instead of stepping back. My guest today is Tali Sharot, a cognitive neuroscientist who studies how we form beliefs and make decisions. She’s known for her research on the neural basis of human optimism, and her work has been published in leading journals. In her books, The Optimism Bias and The Science of...
info_outlineEasy Prey
Most scams leave a digital trail. A fake email, a spoofed number, a fraudulent website. You can trace them, report them, sometimes even reverse them. But what happens when the scam has no digital trail at all, because it isn't happening on a screen? What happens when the con is standing right in front of you, making you laugh, meeting your friends, and planning a future with you? My guest today is Tracy Hall. She's an author, keynote speaker, and senior marketing executive with over 25 years at some of the world's most recognizable tech companies including eBay, Virgin, GoDaddy, and...
info_outlineEasy Prey
Every day, employees at hotels, restaurants, and resorts across the country are doing exactly what they were hired to do: being warm, responsive, and eager to help. It's what makes hospitality work. It's also what makes hospitality one of the most targeted industries in cybersecurity. When your entire workforce is trained to say yes, teaching them to be suspicious is an uphill battle. The smarter solution might be to take the target off their backs entirely. Jasson Casey is the co-founder and CEO of Beyond Identity, a company built around one idea: making identity-based attacks impossible....
info_outlineEasy Prey
Most security breaches don't begin with sophisticated code or elaborate technical exploits. They begin with a phone call, a convincing email, or someone at a help desk who just wanted to be helpful. The human layer is often the weakest link, and the criminals who understand that are the ones causing the most damage. My guest today is May Chen-Contino. She's the CEO of Unit 221B, a threat disruption company that delivers actionable intelligence to enterprises, law enforcement, and government agencies. Her background spans cybersecurity, fintech, and SaaS leadership at companies like PayPal and...
info_outlineEasy Prey
Phone scams get dismissed as background noise or just annoying interruptions and unknown numbers with robotic voices we learn to ignore. But behind that noise is an industry built on psychology, automation, and staggering profitability. My guest today is Alex Quilici. He’s an engineer, entrepreneur, and the CEO of YouMail, a company focused on protecting consumers and businesses from unwanted and fraudulent calls. Alex has spent years analyzing how robocalls and scam campaigns are designed, how they evolve, and why they continue to work despite better technology and increased awareness. What...
info_outlineEasy Prey
Identity theft gets talked about a lot, but usually in the abstract: freeze your credit, watch your statements, don't click suspicious links. What doesn't get talked about nearly enough is what it actually feels like when someone isn't just using your card number, but is actively living as you. My guest today is Brooklyn Lyons. She's 25, recently married, and by her own admission, had no particular expertise in fraud or cybersecurity before October of 2024. That changed when her car window was smashed in a parking lot, and her work bag, laptop, wallet, driver's license, and everything...
info_outlinePublicly available data can paint a much clearer picture of our lives than most of us realize, and this episode takes a deeper look at how those tiny digital breadcrumbs like photos, records, searches, even the background of a Zoom call can be pieced together to reveal far more than we ever intended. To help break this down, I’m joined by Cynthia Hetherington, Founder and CEO of The Hetherington Group, a longtime leader in open-source intelligence. She also founded Osmosis, the global association and conference for OSINT professionals, and she oversees OSINT Academy, where her team trains investigators, analysts, and practitioners from all experience levels.
Cynthia shares how she started her career as a librarian who loved solving information puzzles and eventually became one of the earliest people applying internet research to real investigative work. She talks about the first wave of cybercrime in the 1990s, how she supported law enforcement before the web was even mainstream, and why publicly accessible data today is more powerful and more revealing than ever. We get into how OSINT actually works in practice, from identifying a location based on a sweatshirt logo to examining background objects in video calls. She also explains why the U.S. has fewer privacy protections than many assume, and how property records, social media posts, and online datasets combine to expose surprising amounts of personal information.
We also explore the growing role of AI in intelligence work. Cynthia breaks down how tools like ChatGPT can accelerate analysis but also produce hallucinations that investigators must rigorously verify, especially when the stakes are legal or security-related. She walks through common vulnerabilities people overlook, the low-hanging fruit you can remove online, and why your online exposure often comes from the people living in your home. Cynthia closes by offering practical advice to protect your digital footprint and resources for anyone curious about learning OSINT themselves. This is a fascinating look at how much of your life is already visible, and what you can do to safeguard the parts you’d rather keep private.
Show Notes:
- [01:17] Cynthia Hetherington, Founder & CEO of The Hetherington Group is here to discuss OSINT or Open-Source Intelligence.
- [02:40] Early cyber investigators began turning to her for help long before online research tools became mainstream.
- [03:39] Founding The Hetherington Group marks her transition from librarian to private investigator.
- [04:22] Digital vulnerability takes center stage as online data becomes widely accessible and increasingly revealing.
- [05:22] We get a clear breakdown of what OSINT actually is and what counts as “publicly available information.”
- [06:40] A simple trash bin in a photo becomes a lesson in how quickly locations can be narrowed down.
- [08:03] Cynthia shares the sweatshirt example to show how a tiny image detail can identify a school and possibly a city.
- [09:32] Background clues seen during COVID video calls demonstrate how unintentional information leaks became routine.
- [11:12] A news segment with visible passwords highlights how everyday desk clutter can expose sensitive data.
- [12:14] She describes old threat-assessment techniques that relied on family photos and subtle personal cues.
- [13:32] Cynthia analyzes the balance and lighting of a Zoom backdrop, pointing out what investigators look for.
- [15:12] Virtual and real backgrounds each reveal different signals about a person’s environment.
- [16:02] Reflections on screens become unexpected sources of intelligence as she notices objects outside the camera frame.
- [16:37] Concerns grow around how easily someone can be profiled using only public information.
- [17:13] Google emerges as the fastest tool for building a quick, surface-level profile of almost anyone.
- [18:32] Social media takes priority in search results and becomes a major driver of self-exposed data.
- [19:40] Cynthia compares AI tools to the early internet, describing how transformative they feel for investigators.
- [20:58] A poisoning case from the early ’90s demonstrates how online expert communities solved problems before search engines existed.
- [22:40] She recalls using early listservs to reach forensic experts long before modern digital research tools were available.
- [23:44] Smarter prompts become essential as AI changes how OSINT professionals gather reliable information.
- [24:55] Cynthia introduces her C.R.A.W.L. method and explains how it mirrors the traditional intelligence lifecycle.
- [26:12] Hallucinations from AI responses reinforce the need for human review and verification.
- [27:48] We learn why repeatable processes are crucial for building trustworthy intelligence outputs.
- [29:05] Elegant-sounding AI answers illustrate the danger of unverified assumptions.
- [30:40] An outdated email-header technique becomes a reminder of how quickly OSINT methods evolve.
- [32:12] Managed attribution—hiding your digital identity—is explained along with when it’s appropriate to use.
- [33:58] Cynthia unpacks the reality that the U.S. has no constitutional right to privacy.
- [35:36] The 1996 case that sparked her digital-vulnerability work becomes a turning point in her career.
- [37:32] Practical opt-out steps give everyday people a way to remove basic personal data from public sites.
- [38:31] She discusses how indirect prompting of AI tools can still narrow down someone’s likely neighborhood or lifestyle.
- [39:58] Property and asset records emerge as unavoidable exposure points tied to government databases.
- [40:52] A high-risk client’s situation shows how family members often create digital vulnerabilities without realizing it.
- [42:44] Threats that surface too late demonstrate why proactive intelligence work is essential.
- [44:01] Concerns about government surveillance are contrasted with the broader access private investigators actually have.
- [45:12] Train tracks become an example of how physical infrastructure now doubles as a modern data network.
- [46:03] She explains how audio signatures and forensic clues could theoretically identify a train’s path.
- [47:58] Asset tracking becomes a global operation as valuable cargo moves between ships, trucks, and rail systems.
- [49:48] Satellite imagery makes monitoring even remote or underwater locations almost effortless.
- [51:12] Everyday applications of geospatial analysis include environmental changes and shifts within local communities.
- [52:19] Surveillance is compared to gravity; it's constant, invisible, and always exerting pressure.
- [52:44] Cynthia shares practical strategies for controlling your environment and keeping conversations private.
- [54:01] Resources like OSINT Academy, Information Exposed, and the Osmosis Association offer pathways for learning and strengthening personal privacy.
- [55:32] The episode closes with encouragement to stay aware of what you share and how easily digital clues can be connected.
Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.
Links and Resources:
- Podcast Web Page
- Facebook Page
- whatismyipaddress.com
- Easy Prey on Instagram
- Easy Prey on Twitter
- Easy Prey on LinkedIn
- Easy Prey on YouTube
- Easy Prey on Pinterest
- Hetherington Group
- OSMOSIS
- OSINT Academy
- Cynthia Hetherington - LinkedIn
- OSINT: The Authoritative Guide to Due Diligence
- Business Background Investigations: Tools and Techniques for Solution Driven Due Diligence