Category: OSINT — Techniques & Methodology
-
OSInt on China: a look beyond the wall
For a few years now, for study and for work, I’ve been developing my own processes and tools to do OSInt on Chinese targets. It all started both for academic reasons, as a student at Ca’ Foscari, and through CTI work, where reconstructing the behaviour and structure of Chinese adversaries was an integral part of…
-
Why we built the Multilingual OSINT Glossary?
When you work in a multicultural environment, sooner or later you’ll find yourself looking up the exact meaning of a term you might need to study a text, prepare a presentation, or talk with other OSINT experts who don’t speak your language… and so on. So we decided to start work on a Multilingual OSINT…
-
Instagram password resets: what’s going on?
Setting the stage Across the week of 5th–11th of January many people posted on social media about unattended emails requesting password resets for their Instagram account(s). In this article we explore what actually happened, to the maximum extent of our knowledge and information available to us, and debunk some attempts by Social Media Influencers to…
-
Why the Telegram “one-click IP leak” is not a vulnerability
Recent worrying rumours about a vulnerability featuring the IP address leak of a Telegram user have been circulating all over the internet. In this article we assess the severity of said “vulnerability”, how the “exploit” works and what can be done before falling into the trap. Finally, we explore a set of considerations to take…
-
A day-to-day safe browsing app
Why Everyday Privacy Matters Everyday browsing might feel like a casual scroll, but it’s also a steady stream of data that silently follows you around the internet. Most popular sites embed multiple third-party trackers on a single page, so each click hands away snippets of your behaviour to dozens of advertisers. Beyond the moment-to-moment clicks,…
-
Why you need to know about ICD 203
Let’s be frank: a lot of people pontificate online about OSINT. The problem? They often focus on collection tools and techniques, completely overlooking the methodologies and analytical techniques that should be employed. Accumulating data does not mean “doing OSINT.” Rather, it just means taking up disk space. The real difference is made by you, the…