Do you remember those Nigerian prince scams where you'd get an email with a prince promising you millions of dollars if you just help him out with your bank account information? Those were the good ol' days where email dominated the internet. I was tagged in a tweet today by @callmetosyn asking me to help with … Continue reading Uncovering a Real Nigerian Prince Scam with OSINT and a Little Help from My Friends
Introduction If you've read the first post about JungleScam, I'm glad to say that we've released v2 of the script. There are still some kinks that need to be worked out, including adding some proxies to avoid blocks from Amazon, but Francesco and I think there's more value to be had in this new version. … Continue reading JungleScam v2 – Crawl Just Launched, Poor Reviews, and Total Listings Per Seller
Introduction The future of the non-tech savvy OSINT professional is over. The internet has become far too vast for an individual to collect manually and it will only continue to grow at an exponential pace. This is my thesis, but I don't claim to be an expert on the trend nor do I believe this … Continue reading Python is the Future of OSINT – How to Stay Ahead
I've found myself at an awkward place at the intersection of OSINT and eCommerce. The reason I find it awkward is I feel like tons of people are talking about eCommerce but no one in the infosec or investigations community comes to mind. As more and more transactions become digital, I think it's important to … Continue reading JungleScam – The First eCommerce OSINT Tool
Introduction There's a lot of information out there related to OSINT investigations. Not nearly enough as there should be, considering the amount of free tools and guides available, but a lot nonetheless. One thing that isn't talked about online is the intersection between OSINT and eCommerce. Now, the tools and processes in this article are … Continue reading Investigating eCommerce Scammers on Amazon using OSINT
Introduction One of my main missions is to help create a bridge between the 'old school' OSINT community and the infosec recon community. OSINT has started to gain traction in the infosec community, but there's still a bit of a communication gap. Private investigators and intelligence analysts aren't exactly communicating with penetration testers and DFIR … Continue reading Using OSINT to help build the OSINT community on Twitter
Introduction Last week on the OSINT podcast I was asked a question that I don't believe I answered to the best of my ability. Partly because audio presents certain challenges when describing a visual process, and partly because I don't think I fully contemplated the extent of the question or how in detail I should … Continue reading Using OSINT to Find Protest Events and Activist Groups on Facebook
