🔎 That Video Call Might Be a Rerun, Your Texts Might Be Rerouted, and the Glasses Are Listening
Or: Today in Sweeps and Sleuths, When a Familiar Face on the Screen Isn’t Really There
By Thomas Seest, Dunlap.Today · Friday, November 13, 2026
Picture getting a video call from an old work buddy. You see his face, he waves, and then the sound cuts out. A little box pops up: “Click here to fix your audio.” You click. That’s how the FBI says North Korean hackers got into hundreds of computers, and your buddy was never on the call at all. It was a recording of him from an earlier trap.
The FBI announced Thursday that it broke up that scheme and seized more than 900 secretly recorded webcam videos. It’s a good reminder for today’s theme: the snoops are getting very good at borrowing faces and voices we trust.
Here’s the plain-English roundup for folks who buy bug sweeps and the private investigators who do the work: fake video calls, hijacked texts, spy tools built with AI, face matches in court, glasses and gadgets that listen, hidden trackers, fake voices, new deepfake detectors, tools for PIs, and plate readers.
⏱️ What this means for you in 30 seconds
- Never click a “fix your audio” link during a video call. Hang up and call back.
- Switch text-message login codes to an authenticator app where you can.
- Only install browser add-ons you know and trust.
- An AI face match is a lead, not proof. A federal judge just said so.
- Smart glasses and smartwatches can record a room. Ask before a private talk.
- Agree on a family code word for any panicked call asking for money.
🎥 The Friend on the Call Was a Recording
The FBI says North Korean hackers stole more than $400 million in cryptocurrency over about a year and a half with a scheme it calls FaceStealer. They sent invites to fake versions of Zoom, Teams and Google Meet. On the call, they played a video of somebody the target knew, then faked a sound problem and offered a “fix” that was really spy software. Every call got secretly recorded, so each victim’s face became bait for the next one. Those are the government’s allegations.
What it means for you: It’s like a con man wearing your cousin’s coat and hat, waving from the end of the driveway. If anything on a call asks you to download something, stop, hang up, and call the person on a number you already have. And put a sticky note over your webcam when you’re not using it.
📶 Your Texts Took a Detour
A Swedish telecom security company called Enea found a spy group it named SilentAir. The group broke into equipment inside phone companies in at least six Asian countries and told the network, in effect, “this person’s phone is over here now.” Their calls and texts went to the spies instead, including the one-time login codes banks and email send by text. Most targets were in Taiwan, including political and government figures.
What it means for you: This kind of spying never touches your phone, so no bug sweep would find it. It’s like somebody filing a change-of-address card with the post office in your name. Where you can, switch from text-message codes to an authenticator app or a security key.
🧩 Spy Tools Built With an AI Helper
Researchers at Palo Alto Networks’ Unit 42 found a spy kit called Falcon hidden in government email websites in five countries. One line of hidden code stole passwords and emails as people logged in. A fake “PDF Viewer” browser add-on could read private messages and swap real downloads for bad ones. The researchers say the code looks like its makers likely had AI help writing it.
Separately, Apple met with officials in Thailand about spyware warnings it sent to politicians there, and a group of governments including the U.S. finalized voluntary rules for companies that sell hacking tools. How AI changes that business was a big topic at the meeting.
What it means for you: AI is helping small crews build big tools. Clean out browser add-ons you don’t recognize, and if your iPhone ever shows a threat warning, turn on Lockdown Mode and get expert help before you reset anything.
👉 Unit 42 · MacRumors · CyberScoop
⚖️ A Judge Puts AI Face Matches in Their Place
In Kentucky, a man spent more than two weeks in jail after a detective allegedly used only a facial-recognition match to tie him to a bad-check case. The man says he was working in Nebraska at the time, and the charges were dropped. Now a federal judge is letting his lawsuit go forward, writing that the Constitution doesn’t allow arrests based on nothing more than an AI’s say-so. The detective denies wrongdoing, and nothing has been decided yet.
What it means for you: An AI match is like a neighbor saying “I think that was his truck.” Worth checking, but not enough on its own. If you or a family member are ever accused based on a face match, ask a lawyer to demand how that match was made.
👓 Glasses, Watches and Necklaces That Listen
Google’s new AI glasses went on preorder Thursday. Google says it blurs strangers’ faces before its AI sees them and bans face-recognition apps, but Biometric Update points out it’s not clear how that ban is enforced on other apps, and the AI can look around without lighting the recording light. The Electronic Frontier Foundation warned that glasses, smartwatches and AI pendants are being built to record and summarize conversations all day, and the people nearby have no way to opt out. In Georgia, college students told WSB-TV they worry about being filmed by smart glasses without knowing it.
What it means for you: Those glasses look just like Grandpa’s bifocals. For a doctor’s visit, a lawyer meeting or a family talk about money, it’s fair to ask everybody to set aside phones, watches and glasses.
👉 Biometric Update · EFF · WSB-TV
📍 Tiny Trackers, Big Trouble
Japan’s police say stalking cases involving GPS devices and lost-item tags have jumped, and a Tokyo private investigator says he now gets requests every month to sweep cars and bags for them. One former stalker admitted he found a woman’s new home just by matching the background of her social media photos to street maps.
What it means for you: A tracker the size of a quarter can ride along in a purse or under a bumper. If somebody always seems to know where you are, get your car and belongings checked, and think twice before posting photos that show your house or street.
🗣️ Fake Voices and the Tools That Catch Fakes
Police in Danbury, Conn., warned of more “grandparent” scams, where a caller pretends a grandchild is in jail or hurt and needs money fast. They said some scammers now use AI to copy a loved one’s voice. On the defense side, researchers at Keele University in England built a deepfake photo detector that scored about 99% in lab tests, though they say it still struggles with unfamiliar images. A company called identifAI also released a new detector it says cuts false alarms on videos by 20%. Those are the company’s figures.
What it means for you: Detectors are getting better, but the old-fashioned callback still works best. Pick a family code word tonight, and if a call feels urgent and scary, hang up and call the person directly.
👉 Patch · Keele University · identifAI
🩺 Being Watched Can Make You Sick
Doctors from Harvard, Johns Hopkins and Massachusetts General Hospital wrote in the New England Journal of Medicine that AI-powered mass surveillance is a health risk. Feeling watched all the time causes stress, and fear of being tracked can keep people from going to the doctor or the pharmacy.
What it means for you: If you’re losing sleep because you think you’re being watched, that’s a real problem worth solving. A good sweep can either find the problem or give you peace of mind.
🧰 For the PIs: Research Robots You Can Keep at Home
A newsletter for investigators called Buried Signals released Mycroft 2.0, which runs AI investigation tools on your own computer instead of the internet, so sensitive case files stay put. Its companion, Spotlight 2.0, sends a team of AI helpers down different leads and uses a separate AI fact-checker to test what they find. Another company, Nexus, is pitching AI research tools to private investigators that link each finding back to its source. Those are the companies’ descriptions.
What it means for you: An AI research helper is like a new hire who works fast and never sleeps. You still check every lead, especially when two people share the same name, before it goes to a client or a judge.
👉 Buried Signals · Nexus
🚗 The Plate-Reader Tug of War
Cedar Rapids, Iowa, and Moorhead and West Fargo up north are trading their Flock cameras for Axon’s, and West Fargo’s package adds AI that helps write police reports and translate conversations. Fresno put off new plate-reader rules, including a facial-recognition ban, until December. Grand Rapids kept Flock for now, San Diego’s council appears to have the votes to end its contract at a meeting Monday, and a Providence hearing on a full ban drew more than two hours of testimony, including a claim that passwords for at least 35 Flock customer accounts were stolen.
What it means for you: Switching camera companies often means more AI, not less. If your business has a login to any shared camera system, use a strong password and remove anybody who’s left.
👉 Iowa Public Radio · InForum · ABC30 · WGHN · Fox 5 San Diego · Uprise RI
— Dunlap.Today
📚 Plain-English AI Glossary
- TSCM: Technical surveillance countermeasures, the professional name for a bug sweep.
- Deepfake: Fake video, photo or audio made to look or sound like a real person.
- 2FA: Two-factor authentication, the extra code you enter after your password.
- SS7: An old system phone companies use to route calls and texts to each other.
- Silent SMS: A text message your phone receives without showing or alerting you.
- Browser extension: An add-on program that runs inside your web browser.
- Lockdown Mode: An iPhone setting that shuts off features spyware often exploits.
- Facial recognition: Software that compares a face to photos to guess who it is.
- OSINT: Open-source intelligence, research using public information.
- ALPR: Automated license plate reader, a camera that logs passing plates.
❓ Frequently Asked Questions
How can I tell if a video call is fake?
You often can’t by looking. Watch for pressure to download anything, especially a “fix” for sound or video. When in doubt, hang up and call the person on a number you already know.
Can a bug sweep find it if someone is rerouting my texts?
No. That happens inside the phone company’s network, not on your phone. Using an authenticator app instead of text codes is the best defense.
Is a facial recognition match enough to arrest someone?
It shouldn’t be. A federal judge in Kentucky said an uncorroborated AI match isn’t enough, and many police policies already treat it only as a lead.
Can I ask someone to take off smart glasses?
Yes. For private meetings, it’s reasonable to ask everyone to set aside glasses, watches and phones that can record.
What should I do if I think I’m being tracked?
Have your car and belongings checked for trackers, review which apps share your location, and talk with local law enforcement if you feel unsafe.
✅ Today’s Counter-Surveillance Checklist
- ✅ Never download a “fix” during a video call
- ✅ Cover your webcam when it’s not in use
- ✅ Switch from text-message login codes to an authenticator app
- ✅ Remove browser add-ons you don’t recognize
- ✅ Treat any AI face match as a lead, not proof
- ✅ Ask guests to set aside glasses and watches for private talks
- ✅ Check your car and bags if someone always knows where you are
- ✅ Set a family or office code word for urgent calls
- ✅ Remove old logins to any shared camera system
The rule of thumb: a familiar face or voice on a screen isn’t proof anymore, so when money or secrets are on the line, hang up and check another way.
0 Comments