Cybercriminals Aren't Coding Geniuses—Most Are Social Engineers
Contrary to popular belief, most cybercriminals aren't elite hackers. Johnson explains that 98% rely on social engineering and repurposing existing tools, not building complex code from scratch.
- Only 1–2% of cybercriminals are actual coders; the rest are skilled manipulators.
- Criminals often use legal tools like Tor, VMs, or penetration testing software for illegal purposes.
- Social engineering is the key to deployment—getting victims to click links or insert infected USBs.
- Most attacks use known, unpatched vulnerabilities, not zero-day exploits.
“There's this perception that cyber criminals are computer geniuses. I would say that's not true.”
“90% of every single attack uses a known exploit. It's not zero-day attacks.”