---
title: 'Cybersecurity Expert Answers Hacking Questions | Tech Support | WIRED'
source: 'https://youtube.com/watch?v=yAkdi07egzc'
video_id: 'yAkdi07egzc'
date: 2026-08-04
duration_sec: 1652
---

# Cybersecurity Expert Answers Hacking Questions | Tech Support | WIRED

> Source: [Cybersecurity Expert Answers Hacking Questions | Tech Support | WIRED](https://youtube.com/watch?v=yAkdi07egzc)

## Summary

In this WIRED Tech Support video, cybersecurity expert Allison Nixon, Chief Research Officer at Unit 221B, answers a variety of internet questions about hacking, online scams, and digital security. She covers topics ranging from AI voice scams and sextortion emails to the darknet, password security, and how law enforcement tracks cybercriminals.

### Key Points

- **Bots in comment sections** [00:00] — Bots are increasingly posting in comment sections, often to spam or manipulate public opinion. They can be operated by nation states to influence populations. It's important to be aware of this and form opinions based on court documents or reports rather than bot-driven comments.
- **AI voice scams** [01:56] — Scammers can use AI to clone voices, often targeting elderly family members with fake emergency calls. To protect against this, establish a family protocol, ask personal questions only the real person would know, and hang up and call back on a known number.
- **Phone activity access** [03:37] — Phone activity can be accessed through stored data like SMS records or cloud accounts. To stay safe, use unique passwords for each account, store them in a password manager, and be mindful of what you share.
- **Wrong number text scams** [04:44] — Wrong number texts are often part of organized crime operations. They try to initiate conversations to build trust and eventually scam you. Do not engage, do not send money, and report the number.
- **Anonymous is still around** [05:38] — The original members of Anonymous have moved on, but the collective still exists in some form. They are less active in the wild ways they used to be.
- **SMS spam reporting** [06:06] — Reporting spam messages on SMS sends the data to cybersecurity teams who monitor trends and update anti-fraud mechanisms. It is a useful action to help combat scams.
- **Darknet risks** [07:14] — The biggest danger on the darknet is human threats, not technical ones. It is a place of social activity for criminals, and wandering in can expose you to hostile actors. Keep software updated and be cautious.
- **Clicked a suspicious link** [08:25] — If you clicked a suspicious link, check if you entered personal information. If you did, change passwords and possibly reinstall the OS. If you didn't, close the page and report it.
- **Password change frequency** [09:52] — For accounts you use often, change passwords every three months. Use unique passwords for each site, especially for important accounts like banking and work. A password manager can help.
- **Sextortion emails** [11:13] — Sextortion emails are mass scams claiming to have compromising pictures. They are sent to millions, and most recipients have nothing to worry about. Do not panic, do not pay, and report it.
- **Why governments block websites** [12:12] — Governments block websites for various reasons, including illegal content, political censorship, or to shut down the internet entirely. International law on cybercrime is weak, so it's a complex issue.
- **Do cybercriminals dump phones?** [13:43] — Smashing phones doesn't help because data can still be retrieved from chips and boards by forensics teams. They can read data bit by bit if the case is important.
- **Security training for aging parents** [14:24] — Talk to aging parents about device security, set up secure devices, and ensure they know they can call you. Scams often target the elderly, so keep them educated.
- **Hacking vs. social engineering** [15:16] — Hacking implies technical attacks, but social engineering involves lying to people to get them to do things. Both are dangerous, but social engineering is often more common.
- **Why care about data security** [15:45] — Even if you think you have nothing to hide, your data can be used in the future for identity theft or other crimes. Once stolen, it's out there forever.
- **Hospitals vulnerable to cyber threats** [16:27] — Hospitals use complex machines that can't be updated often, making them vulnerable. Attacks can delay treatments and cause harm. Police prioritize these cases.
- **Hacking through Wi-Fi** [17:22] — Public Wi-Fi can be risky, but modern attacks often target many victims at once rather than individuals. Still, be cautious and use VPNs if needed.
- **Hackers as a threat** [18:14] — The internet allows bad actors to reach millions, and there are gangs that recruit for violence. This is a serious threat that the public should take seriously.
- **What hackers actually do** [18:58] — Hackers spend 70% of time Googling, 20% reading documentation, and 10% actually hacking. The term 'hacker' can mean cybercriminal or someone exploring computers for fun.
- **Script kiddie vs. hacker** [20:24] — Script kiddies use exploits without understanding them, while hackers may have deeper knowledge. The term is controversial, but ethical hackers use skills to improve security.
- **How companies know data was stolen** [21:05] — Extortion groups often tell companies they stole data, threatening to leak it if not paid. Sometimes they delete data, but they may also destroy the company.
- **Computer Fraud and Abuse Act** [21:48] — This law defines illegal hacking. Police determine illegality based on whether there's harm, like stealing money or causing damage. Don't be a bad person online.
- **Cyberattacks in war** [22:40] — Cyberattacks are often used in conjunction with physical attacks, like hacking traffic cameras to inform missile strikes. This is a common pattern in modern conflicts.
- **Why iPhones are hard to hack** [23:26] — iPhones are designed to be secure and locked down, while Android offers more flexibility. This trade-off affects how easily they can be accessed by law enforcement.
- **How data breaches happen** [24:22] — Breaches occur through unpatched exploits or tricking employees into giving credentials. Companies constantly fix these, but new ones are discovered.
- **Tracking cybercriminals using VPNs** [25:03] — Law enforcement catches criminals by waiting for mistakes. They leave footprints in encrypted devices and other traces, not related to encryption itself.
- **How VPNs work** [25:48] — VPNs route your traffic through another machine, hiding your IP address. However, they also increase risk because that machine could be malicious. Choose carefully.
- **Fighting cybercrime** [26:44] — Cybercrime can be reduced but not eliminated. Strategies include taking down forums like RaidForums and BreachForums, arresting bad actors, and scattering them.

### Conclusion

The video provides practical advice on recognizing and avoiding common online scams, understanding the risks of the darknet and public Wi-Fi, and emphasizes the importance of proactive security measures like unique passwords and family protocols. It also clarifies common misconceptions about hacking and cybercrime.

## Transcript

doesn't mean they're not capable of doing a lot of damage. Hi, I'm Allison Nixon, chief research officer at Unit 221B. I'm here today to answer your questions from the internet.
[upbeat music] "The internet isn't just crowded with bots,
Think zombie apocalypse, but digital." I see an em dash, I think this is a bot.
In comment sections all across the internet, there are a lot of bots that are posting nowadays. and spamming the comment section by saying,
I use it all the time, and you can buy it here." and sometimes these are operated by nation states the population in another country
into voting a certain way or doing a certain thing. And so as you're reading comments on the internet, where they're treating you as a pawn.
It's a difficult issue to navigate. I would suggest that you find like court documents or reports that happened
rather than later on down the line. and then form your own opinions. "Scammers are using my voice with AI. What do I do?"
where a elder family member may receive a phone call and the scammer may be telling your grandparents
I need money right now. I'm injured, I'm hurt. because oftentimes these scams to actually verify that this happened.
it's very difficult to deal with. is before this scam hits you, Say, "Hey, there's a new scam going around.
And this can be a good topic of conversation and also keep each other safe. one thing that they can do is try to verify
Ask a question that only you would know. So think very old past shared experience. What's your favorite food? What was the first dog's name?
is just hang up the phone and call you back on your number. but if you can discuss what your protocol is going to be
then if this scam does hit your family member, and they won't hand over the money. "Can someone gain access to your phone activity
When someone gains access to your phone activity, coming into contact with your phone at all. is when your information is stored
One place where your phone activity is stored or you send or receive a text message, and those records get stolen,
what you're doing on your phone. Also, you may have personal data on cloud accounts, you're updating those cloud accounts with more information.
these actors can figure out what you're doing on your phone One way to keep yourself safe is to be mindful Make sure that you're not using the same password
Hopefully, store that password manager This is what we do. This is a question from Idk1997283.
So the wrong number text scams is something You receive a text from an unknown number and it may say, "Hello, John," and your name is not John.
And then they'll try to initiate a conversation with you. These are part of organized crime operations and unfortunately, they have a history
So when you receive a wrong number text scam, Don't talk to the person, don't give them any money.
because you don't know who's on the other end is behind that text that you got. "Is Anonymous still around? LOL."
The original people that made up Anonymous, so you don't see them do the wild things because they have lives that they need to live
So this question is from tyinsf. "Does SMS messages report spam do anything???" There may be a button that looks like three dots,
associated with that message. and you may see an option that says Report. When you report a message on SMS
that goes to an entire ecosystem of cybersecurity employees and take notes and monitor for trends.
because this job involves essentially human conflict The scammers are continuously updating their scams
and the cybersecurity people are receiving these reports and continuously updating the anti-fraud mechanisms So when you receive a fraudulent message,
So this question "Is there any risk in snooping around the darknet?" keep in mind that the biggest danger coming from the darknet
but it's coming from human threats. Keep in mind that the person on the other end and these are not normal social interactions.
There's a lot of cybercriminal forums, socializing places where criminals tend to hang out, There's also ransom websites
where extortion groups will steal data from companies Sometimes people go on the darknet for work, what they're bragging about,
for any mistakes they may have made in their communications. So the darknet is a place of social activity. If you wanna wander into it,
Obviously keep your software updated. that you find on the darknet. and hostile countries.
"Don't click the link? Okay. You may have just clicked on a weird, suspicious link Sometimes people do
and they may come from a legitimate sender So double check the sender, definitely hit the Report button
That way it can go into the system, On the device that you clicked on that suspicious link, did you input any of your personal information?
Think about what happened after clicking that link. the next steps that you need to take. you need to change that password.
and get your credit card number changed over or installed anything from that website, it may be worth reinstalling your operating system.
and then closed out of it immediately, than if you had inputted any information This question is from lemonsnicks.
For accounts that you log into all the time, approximately every three months. It's inconvenient, and nobody wants to do it.
versus using a unique password on every website, on every website. And the reason for this is,
they will try that same password This is a common practice by attackers. you should focus on the most important
your work accounts, your banking, for communication with your friends. a good practice is to use
where you note down all of your accounts you also need to update your password manager. you're gonna use one password
I prefer to use the ones and not in the cloud. A Quora user asks, "Are sextortion emails real?"
that say, "Oh, I've got your naked pictures. These are sent to millions of people. of those millions of people
because they might have a situation going on, These kinds of scams are very damaging. Don't get emotionally wrapped up into this too much,
There are also sextortion schemes where they may use AI If you are stuck in a situation like this, Don't do anything drastic.
Just slow down, calm down, make rational decisions. it may be difficult for people to report this information. that you can talk to privately about this matter.
from the explain like I'm five subreddit. When people are using the internet, that provide internet access,
that you need to block these websites. the government has essentially to shut down the entire internet,
International law in cybercrime is very weak right now. And in situations like with Iran,
that's a less common scenario. Sometimes this is because it's illegal to criticize the government.
it's usually because the website may be associated So the intentions behind blocking websites if you don't like your country blocking websites,
if you wanna keep the internet open and free A Quora user asks, "Do cybercriminals dump their phones I have seen videos of cybercriminals smashing their phones,
It doesn't really help them. or on different devices, the data inside of it can still be retrieved.
there are forensics teams pull out the chips and the boards and read data off of chips bit by bit.
but if it's a really important case, and they'll figure out what they need to figure out. "Best security training for aging parents?
So this is a very important topic. are getting new phones or new devices, to be more locked down and more secure.
You can talk with them about how these devices can be used, and make sure they know that they can call you anytime Also, another important thing
Oftentimes these scams target elderly people, bring that up as a topic of conversation with your parents.
So it's important to keep them educated, You should call your mother sometime. So this question is from Vision-Quest-9054.
Hacking implies a technical kind of attack, doesn't involve technical skills Oftentimes, it involves just lying to people on the phone,
that they wouldn't otherwise do. "Why should I care about my data getting stolen/sold/generally not being secure?"
is they may not care about their data being stolen. The problem is if you have an income, if you have a job,
You may not realize in the moment but into the future, somebody might come up with a new idea When it's stolen, it's out there,
and it's not going to go away. "Why are hospitals more vulnerable to cyber threats?" They are using machines that are very complex,
and as a result, you can't update the software very often. as quickly as maybe your phone might receive them,
that are unique to them. to hospitals being more vulnerable, There are people that have had their treatments delayed
because of a hack. I feel is getting worse over the years. more than they used to.
The police will often prioritize attacks against hospitals, in that kind of activity often get arrested more quickly. "Is it possible to hack someone through Wi-Fi?"
and nobody else has access to your devices, If you're on a public Wi-Fi at a coffee shop also on the same Wi-Fi,
Now, one thing to keep in mind The typical machine that you're going to use Now that said,
there's a lot of innovative, advanced attacks out there. that you're gonna be totally safe on public Wi-Fi, but nowadays, when cybercriminals are attacking victims,
where they can affect thousands of victims, So a Quora user asks, or are they just a bunch of geeks?"
One thing to keep in mind about the internet, but the problem is that the internet allows you So a bad actor can connect with millions of people.
that could cause harm And there are gangs operating nowadays and to mass recruit people into committing violence.
and I think the general public should also take seriously. Friend asks, "What do hackers actually do?"
Me says, "70% Googling, 20% reading documentation, of what do hackers actually do, The term hacker is a bit confusing and controversial.
People use the same term to mean two very different things. On one hand, hacker can be used to describe a cybercriminal where they are abusing computers in order to abuse people.
is to describe a non-criminal person just exploring what their computer is capable of doing, So a common way that people may engage in hacking
is when kids are cheating at video games. And I don't mean downloading cheats that someone else wrote. I mean manipulating the memory in your computer,
just exploring for yourself. that children commonly engage in But if there's no victim,
Now, if you're a kid watching this, and say that I told you to do it. "The line between script kiddie and hacker???"
that don't understand the systems that they're exploiting. but they will download exploits from the internet Just because someone's described as a script kiddie
The term hacker is a little bit controversial. that hack illegally into computers.
who do not break the law, that wasn't anticipated, and use those skills to make the world more secure.
"How do companies know that hackers stole data?" like if someone steals your car. what data was actually stolen, if any?"
Oftentimes with the extortion groups they will just tell the company that they stole the data. where they are threatening the company and demanding money.
they actually do delete the company's When they're operating these schemes, by destroying the company on the way out.
This question is from Intelligent-Way1288. So there is a law called the Computer Fraud and Abuse Act. It defines what is illegal computer hacking versus not.
And when police are trying to determine usually the metric they go by is whether or not stealing someone else's money, causing harm to a person.
and do weird things that may break a computer, Just in general, don't be a bad person on the internet, This question comes from 747269737616E.
launch cyberattacks on one another?" is not quite the same as launching a missile. One thing that we've seen in recent conflicts
in conjunction with a physical attack. So for example, traffic cameras in a city may be hacked, may be monitoring the cameras
That knowledge may be used to inform missile strikes This is often how we see cyberattacks play out This is from the privacy subreddit.
have so much trouble getting into iPhones?" because iPhones were designed Different products available to the consumer
have different design features, different selling points, often wanna have a phone other competitor phones like Android,
to do what they want on their phone. If you wanna do creative, unusual things with your phone, that could also be used by governments and police
Do you wanna have a more secure, locked down machine Or do you wanna have a machine you can do a lot with? with those abilities.
So this question comes from BadKarma-18. how do data breaches happen?" figured out an exploit that the company didn't fix yet,
or perhaps tricked an employee into providing a credential and then abusing the employee's access to steal data. There is a constant discovery
and companies are constantly fixing all of these exploits. "How does law enforcement track down cybercriminals
who use public Wi-Fi and VPNs to commit illegal activities?" VPNs, public Wi-Fi, Catching them involves waiting for them to make a mistake.
There's a lot of footprints they leave behind within their encrypted devices. that has nothing to do with encryption or data protection.
when it comes to catching cybercriminals, It's quite interesting work, honestly. "So how do VPNs work?"
So say you have a message that you wanna send to a website, You may pass that message to someone else's machine, and then that machine will pass that message to the website.
So a VPN is a way to hide your IP address online. is that you're using someone else's IP address instead. that are gonna tell you this is how you get more secure,
but unfortunately, VPNs also increase risk as well. so that you can use their IP address instead of yours, that other person's machine may be looking at your traffic,
So as you are making your cybersecurity choices, So this question is from Malwarebeasts.
like RaidForums and BreachForums Cybercrime is something that's not gonna be solved, just like regular crime in society, but it can be reduced.
And the actual strategy of fighting cybercrime arrest bad actors, and scattering them is a positive step forward.
and all of these different tactics That's all for today. Hope you learned something. and thanks for watching Cybersecurity Support.