Jun 17, 2026 · 17 min · 12 segments
This time we’re revisiting our conversation with Luke Canfield and focusing on how drones are becoming a cybersecurity problem. Luke walks through war-flying, drone-mounted Wi-Fi Pineapples, rogue…
Luke CanfieldGuest
Adam RothHost
Joe PattiHostNo entities detected.

Um, was basically using an LTE modem with a headless Kali instance, all the antennas on it, and either placing it into an orbit and using it as, like, a war flying platform, which very quickly can turn into running, uh, man-in-the-middle attacks or evil twins, rogue access points, and which, like, drone becomes the carrier for, like, that, like, cyber attack payload.

And there are, like, I think there's been three incidents of that actually being used, and all of them were caught because they were right idea, horrible execution.

Like, the one, I think it was in New York, and they had a Wi-Fi pineapple strapped to a, uh, Matrice 600.

And, and some guy looks out his window at, like, whatever financial building, 'cause these have all been done against financial institutions.

The guy looks, like, some guy looks out his window, and there's just a drone hovering outside of his window, and, like, yeah, they got caught.

And the one that I used in my case study in my talk wa- I think it was Eastern Financial, and they, like, their, uh, network team, like, they, it got into the server and everything, but their network team's like, "There's a rogue access point here." Like, they did signal tracing, and they went up on the roof, and there was, like, a Matrice 600 with, like, a Wi-Fi pineapple, laptop on it, battery packs, um-

Yeah, they landed on top of the HVAC, which, like, that'd be a good place to hide it if it was disguised-

... as something that's supposed to be there and not, like, a Matrice 600, which is a huge drone.

And they just go upstairs, like, they go up on the roof of their building, and there's like, "Well, that's not supposed to be there obviously." And those guys got caught.

Um, was basically using an LTE modem with a headless Kali instance, all the antennas on it, and either placing it into an orbit and using it as, like, a war flying platform, which very quickly can turn into running, uh, man-in-the-middle attacks or evil twins, rogue access points, and which, like, drone becomes the carrier for, like, that, like, cyber attack payload.

And there are, like, I think there's been three incidents of that actually being used, and all of them were caught because they were right idea, horrible execution.

Like, the one, I think it was in New York, and they had a Wi-Fi pineapple strapped to a, uh, Matrice 600.

And, and some guy looks out his window at, like, whatever financial building, 'cause these have all been done against financial institutions.

The guy looks, like, some guy looks out his window, and there's just a drone hovering outside of his window, and, like, yeah, they got caught.

And the one that I used in my case study in my talk wa- I think it was Eastern Financial, and they, like, their, uh, network team, like, they, it got into the server and everything, but their network team's like, "There's a rogue access point here." Like, they did signal tracing, and they went up on the roof, and there was, like, a Matrice 600 with, like, a Wi-Fi pineapple, laptop on it, battery packs, um-

Yeah, they landed on top of the HVAC, which, like, that'd be a good place to hide it if it was disguised-

... as something that's supposed to be there and not, like, a Matrice 600, which is a huge drone.

And they just go upstairs, like, they go up on the roof of their building, and there's like, "Well, that's not supposed to be there obviously." And those guys got caught.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.