Eight People Walk Into a Dark Web Forum. They’re All Azim

What does it take to become someone a cybercriminal will trust? 

Talos' Azim Khodjibaev takes us inside the psychology of direct adversary engagement. At one point, he was maintaining eight different personas, some of which were talking to each other. He explains how discipline and patience help keep his cover intact, and what can provoke threat actors into revealing information. 

His work has occasionally made Azim part of the story. Ransomware operators have threatened him, and one even put “Azim sucks” in their code. He shares how his research has contributed to Talos identifying prolific cybercriminals and disrupting ransomware operations (experiences that will feature in the forthcoming book "Owned").

The conversation also examines how cybercrime is changing. More inexperienced, loosely organized collectives can pull dozens of people into an active intrusion through a Telegram channel, and Azim tells the crew about one particular ransomware trend that's keeping him up at night.

Before all that, we tackle a listener question about what defenders should prioritise when patching everything is impossible. Hazel tries some American snacks for the first time, Joe tests Hazel's patience with more hacker training, and Dave argues that without Yaddle, there would be no Star Wars.