Cyber Detective💙💛 Profile picture
Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in @netlas_io

Dec 9, 2021, 21 tweets

Create "Sock Puppet" (fake account) for making contact with the target and collecting information through dialogue

Links, tips and tricks.

Thread🧵🧵🧵

(0/14)

It is very unlikely that your target is new to the Internet and does not yet know how to use Google Images, Yandex Images and Search4faces.

Therefore, you need a unique face of a non-existent person for an avatar. Neural networks help.

"Sock puppet" thread🧵 (1/14)

generated.photos/face-generator allows you to configure many parameters for the generated face: skin color, gender, age, emotions...

Pay special attention to the "Headpose" parameter. A slightly raised head will make the fake look more natural.

"Sock puppet" thread🧵 (2/14)

Make the fake photo as non-ideal. Add:
assymmetry;
birthmarks;
pigment spots;
pimple marks,scars, swelling, pimples, ptosis and other irregularities.
The way it will be seen that life has been bumping him up and down!
pixlr.com
"Sock puppet" thread🧵 (3/14)

Make sure the account contains more than just pictures of a person's face. Cats, horses, landscapes, photos of interiors...

All of these can also be completely unique and generated by a neural network.

thisxdoesnotexist.com
"Sock puppet" thread🧵 (4/14)

It's possible to use other people's pictures. But is need to edit them properly.

For example, I only rotated the picture of the cat by 16 degrees, and the search results in Google Images have changed very much.

pinetools.com/rotate-image

"Sock puppet" thread🧵 (5/14)

If you create a fake Instagram or other social network account that displays the location of photos, then add at least 1-2 photos with fake geotags. This VERY much adds to the verisimilitude.

thexifer.net
geotagonline.com
"Sock puppet" thread🧵 (6/14)

It is very important that your account has at least 50-100 friends. You can find them:
In special groups for finding friends;
In groups of various social online games;
In groups of religious organizations or network marketing.

"Sock puppet" thread🧵 (7/14)

Ideally, you should make a fake account at least 3-6 months before making contact with the victim. And all this time to simulate his activity. If this is not possible, you can buy other's people accounts. THIS IS ILLEGAL. But it is cheap and effective.

"Sock puppet" thread🧵8/14

Remember that the target will probably google your name and nickname. And, therefore, you should have accounts on different social networks.

And they must have friends and activity there.

"Sock puppet" thread🧵 (9/14)

If you're using fake email to communicate, make sure the address looks live. Sign up for Gravatar, Adobe, Office365, Amazon etc

Remember that tools.epieos.com/email.php is available to everyone.

"Sock puppet" thread🧵 (10/14)

If your task is not deep and serious reconnaissance, and you just need to ask a few questions, you can not bother and just use the public account.

Logins and passwords for different sites can be found at bugmenot.com

"Sock puppet" thread🧵 (11/14)

To save time on coming up with different data for a fake account, you can use a special generator:

elfqrin.com/fakeid.php

"Sock puppet" thread🧵 (12/14)

This thread is about creating fake accounts for the simple communicating for the purpose of intelligence.

If you need a fake account to securely hide your real identity, there are a lot of other nuances to consider (VPN, virtual machines, VOIP etc.).

"Sock puppet" thread🧵13/14

This thread is end. I also recommend reading threads for #socmint:

Telegram



YouTube


Facebook



"Sock puppet" thread🧵 (14/14)

@threader
compile

@threadrip unroll

@PingThread unroll

Share this Scrolly Tale with your friends.

A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.

Keep scrolling