Social engineering attacks may evolve with new technology, but the core tactic hasn’t changed in decades: exploiting human trust. In this episode of The Segment, host Raghu Nandakumara sits down with Timothy Kromphardt, Senior Threat Researcher at Proofpoint to explore how modern scams actually work behind the scenes. Tim spends his days engaging directly with threat actors—sometimes for months at a time—to understand how fraud campaigns operate, how scammers build trust, and how they ultimately convince victims to hand over money or sensitive information. Together, they unpack the mechanics of today’s most common scams, including TOAD (telephone-oriented attack delivery) attacks, business email compromise, and the increasingly sophisticated “pig butchering” investment scams that can drain victims’ life savings after months of relationship-building. Together, Raghu and Tim unpack: Why social engineering continues to succeed—even as security technology improves How pig butchering scams build trust over months before stealing massive sums What happens when researchers directly engage with scammers Why AI is helping attackers scale operations—but not necessarily replace humans Practical steps organizations and individuals can take to reduce their risk If you’ve ever wondered how scammers actually operate—or why even highly successful professionals sometimes fall victim—this episode offers a rare inside look at the human side of cybercrime. Stay Connected with our host, Raghu on LinkedIn For more information about Illumio, check out our website at illumio.com

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related