Hello everyone and welcome back. Here. We
are with our sock puppets topic. As
I have mentioned. This is a fun topic, but as always, to
be used with caution, and now please allow me
to tell you what it is, before we jump into the details of
it.
To tell you what a sock puppet is. I would like to share
a Wikipedia definition of it, which I think Carver's
it best. A sock puppet is an online identity
used for purposes of deception. And
that's it. It is a fake profile
on social media to use it in the open source. Intelligence contacts,
that profile could be used to
connect with relevant people in your field of interest, to get
some information out of them or to Simply redirect people's
opinions about something in the other direction.
Action, but it is imperative. It cannot be
linked back to you. A sec. Puppet takes
time to grow it, and to make it Digital Life
credible on social networks. Join different
groups, comment, different events, and posts. Like,
real people. Actually. It's okay to have a few social
profiles, one on LinkedIn and one on
Facebook with real history, pictures from different places and
so on, you probably encountered a
month old profiles that started to
ENT and talk really convincing about something. Maybe argue something
that kind of profiles probably won't
fool anyone, but can still stir things up.
I also have to mention that since I made my first
version of this open source. Intelligence course,
where I have also talked about sock puppets.
More than a few potential, sock, puppet candidates
contacted me on my social media
platforms.
Now, I will give you a few tips have
to create a sock puppet, with a cool sock. Puppet story
that really happened and was presented at the black hat
conference in USA, in 2010. That
example is called the Robin sage. Sorry. And
here is the link for you to check out. I
recommend to go through this case study where you will
probably get the best overview of a sock puppet profile and
its purpose. Many people fell for it. The
profile had a few gaps but was
overlooked by most. It got job offers contacts,
date request. And even until on
operational security just as an interesting fact,
her profile picture is
from a p*** site. After that. It's
good to have or better to say have
a great profile picture because it
is getting harder to have a fake one. A good one, at
least, but here are a couple of resources for you to
check out.
There's a site called this person does not exist that
calm when you come to think about it,
such a lengthy domain and so easy to remember this
person doesn't exist, does not exist.
That cam is a machine learning project that synthesizes artificial
samples of images and produces artificial.
Authentic images Iraq
meant for you to check it out. An additional side, note
about this. I have mentioned that it is getting harder to
have a fake, a good fake profile picture.
The reason to that is that the currently some social networks
can spot a fake profile picture. So
you're immediately bad. They can even ask for
video few as the private profile owner. But
I really think that is a big invasion of your privacy.
The other resource is
on a domain called generated dot
photos. All the images, have
all the images here have been generated
without human intervention.
Engine through a machine learning process. Do check
its terms of use because there is a paid option included
also, but it is definitely worth taking
a look at it.
After the profile pictures, you will need a good burner email
address. If possible actually more
and more online services are Banning, those kind of female services,
but you can always give it a try at
the present moment. It seems that fast mail.com works best
for my needs. Also do not forget to
have a clean machine and that is your open source intelligence machine
just to keep in mind that browser,
a browser can contain a lot of additional information
that could get linked back to.
You the real you if not, careful, then
more and more services. Ask for a phone number
and I would suggest to not use a real one, rather
a burner like phone, maybe some
Google Voice number but usually
a more and more. It is the case that Google
Voice numbers don't work. So keep that in mind. And
lastly, I would like to mention the IP location
the geolocation. And by that, I mean, on
the IP from which you will create that email.
Account or you will do that. Sign up to the service. I
would recommend for you not to use a VPN or
other IP masking Services while you
do that because that is one of the main red
flags or reasons. Your account might get
on their radar as a fake. One after
our social media intelligence section. We
are ready for our new section. And that is the section
called email, addresses usernames and images, where
we will try to demystify where to
To look for that kind of information online. So see you
in the next video.