Bellingcat Profile picture
Nov 29 28 tweets 8 min read
An American far-right extremist wanted to advertise his fashion brand- without letting people know where he was- but instead he ended up unintentionally demonstrating the power of open source investigation.
bellingcat.com/news/2022/11/2…
This isn’t the first time.
Back in November 2020, Bellingcat revealed that Rob Rundo a native of Queens, New York, and founder of the now-defunct American white supremacist gang Rise Above Movement (RAM), was in Serbia.
bellingcat.com/news/2020/11/1…
Rundo appeared to have made a base for himself there, as the US courts worked through appeals in his case, after he was charged with aiding and abetting a riot and conspiracy to violate the Anti-Riot Act in relation to violent clashes at several rallies in California in 2017.
In January this year the Supreme Court rejected his final petition of appeal; Rundo is facing up to ten years in prison if convicted in his trial, set to begin in April 2023 in Los Angeles.
Rundo is not known to have participated in any of his court hearings in 2022; a public court document from March even notes that Rundo’s defence lawyer had been “unable to reach and communicate” with him.
However, Rundo has been busy promoting his fashion brand; posting three portraits on his fashion brand’s website on 31 October, 2022.
Initially, these pictures appear almost impossible to geolocate. They’re portraits that show no cityscapes, signs or identifiable features in the background.
There’s no graffiti on the wall that would enable quick identification of the city or neighbourhood, as we were able to do in our 2021 investigation. bellingcat.com/news/uk-and-eu…
Even the background of the photos is deliberately blurred; Rundo said on a US far-right podcast in November 2022 that, in photos and videos he puts out, “we have to edit so that you can’t tell location.”
The thing is, you can tell the location here. And it didn't take us long.
The single red stripe was the only clue we needed. But, we knew where to look because we had geolocated a photo posted on Instagram by a close associate of Rundo. We then assumed, correctly, that this photo was taken nearby.
On 16 October 2022, after several weeks of posting photos and video from locations in North Macedonia and Greece, Grady Mayfield, a 20-year-old San Diego resident and close associate of Rundo posted a black-and-white photograph of himself with the caption “On The Road”.
Bellingcat was nonetheless able to geolocate this photograph of Mayfield to Plovdiv, Bulgaria’s second largest city. We found the location by comparing the fencing visible in the photo to those in major cities across southeastern Europe.
google.com/maps/@42.16088…
Only when Bellingcat began looking at median-separated streets in Plovdiv, on Google Street View did we see dark-coloured fencing as seen in the photo with plants interwoven throughout.
After just a few minutes of trawling through Google Street View images in Plovdiv, we found the exact location: a bus stop in the northern part of the city.
This finding prompted us to look for evidence of Rundo’s presence in Plovdiv. On October 19, Rundo published a short video on the Telegram channel of his far-right fashion brand promoting a sweatshirt as “coming soon.”
In the video, the camera pans low behind Rundo as two columns resembling Greek or Roman ruins tower above him. He also stands with his back to the camera in front of another column, with an apartment block visible in the background.
Over the previous weeks, Rundo had posted numerous photos and videos that Bellingcat had been able to geolocate to Greece, which could have led one to conclude these were from Greece as well.
But once we had geolocated the location of Mayfield’s photo to Plovdiv, we assumed there was a very strong chance these photos were taken in that city as well, as one of the city’s main tourist attractions are its extensive Roman ruins. nytimes.com/2019/05/14/tra…
With just a few minutes of searching online, Bellingcat was able to determine that these photos and the video were taken at the ruins of the Roman forum and odeon in central Plovdiv. google.com/maps/@42.14363…
Given Mayfield’s photo from the northern part of Plovdiv, Bellingcat decided to search the immediate vicinity to geolocate Rundo’s photos.
We noted the reflection in the sunglasses that showed what looked like parked cars — indicating that the location was not a busy or wide street and looked like the rear of a building or a courtyard.
Other details visible in Rundo’s photos- such as the single red line of paint on the wall- could be used to identify the location; despite efforts to blur the background.
Using Google Street View, we discovered that the wall is that of an apartment building in Plovdiv, Bulgaria.
goo.gl/maps/g89qEYoxN…
Bellingcat contacted Bulgaria’s national police and asked about Rundo’s case; they told us they couldn’t comment on operational investigations. The US Marshals Service, responsible for extraditing people wanted for crimes in the US, did not respond to requests for comment.
You can read the full article by @ColborneMichael below.
bellingcat.com/news/2022/11/2…
@ColborneMichael Bellingcat is a non-profit and the ability to carry out our work is dependent on the kind support of individual donors.

If you would like to support our work, you can do so here.
bellingcat.com/donate/

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Bellingcat

Bellingcat Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @bellingcat

Nov 28
When 'Viktor Müller Ferreira' was kicked out of the Netherlands on suspicion of espionage, he ended up in a Brazilian jail.

But now, Moscow is now requesting his extradition him on the basis of a partly fabricated criminal case, reports @christogrozev.

bellingcat.com/news/2022/11/2…
@christogrozev 'Viktor' was a student from Brazil bound for an internship at the International Criminal Court in the Hague. In June Dutch intelligence (AIVD) revealed he was in fact a spy for Russia's GRU.

As we reported at the time, his cover story was full of holes:

bellingcat.com/news/americas/…
@christogrozev This man's name was Sergey Cherkasov, a Russian from Kaliningrad.

In July Moscow acknowledged his identity, claiming that he was not a deep-cover GRU spy but a hardened criminal on the run from justice, involved in a heroin-smuggling ring in the early 2010s.
Read 18 tweets
Nov 23
Open source research can be rewarding but it can also come with risks of which beginners may not be aware.

This is particularly true for those of us covering warzones such as Ukraine.

bellingcat.com/resources/2022…
As @firstdraftnews writes in a guide for journalists, experiencing "repeated or extreme exposure to aversive details of traumatic events" in a work context can bring on PTSD-related symptoms. firstdraftnews.org/wp-content/upl…
@firstdraftnews This risk isn't new. Since we last published on vicarious trauma in 2018, awareness of the issue has grown significantly among journalists and researchers. bellingcat.com/resources/how-…
Read 14 tweets
Nov 18
After a tip about an attack on a convoy in northern Burkina Faso that killed dozens, Bellingcat used satellite imagery to locate the remains of vehicles stretched across 5 kilometres of highway.

New from @y_vdw bellingcat.com/news/2022/11/1…
@y_vdw Last month @MENASTREAM, a research group that focuses on the Sahel, reached out to Bellingcat to ask if we had access to satellite images that could shed new light on a September attack on a civilian convoy in northern Burkina Faso.
@y_vdw @MENASTREAM Burkina Faso has long been troubled by an ongoing Islamic insurgency, not to mention two coups in 2022 alone.

The second of these occurred several days after the September attack. aljazeera.com/news/2022/10/5…
Read 24 tweets
Nov 11
Over the years, Bellingcat has built up a healthy and vibrant Twitter following. But you can also find us on a host of other social platforms.

Come join us on Facebook, LinkedIn, Twitch, Discord and more — links to which can be found below…
First up, our bi-weekly newsletter now has circa 60k followers who get the latest news from Bellingcat sent directly to their inbox. Sign up here: bellingcat.us14.list-manage.com/subscribe?u=c4…
You can view our most recent newsletter here: mailchi.mp/bellingcat.com…
Read 14 tweets
Nov 3
In the period since we published our guide to researching the Ukraine war on TikTok yesterday, the platform has released an important privacy policy update for users in the UK and EU bellingcat.com/resources/how-…
TikTok stated that user data can in some cases be accessed by employees outside Europe including in China, as a number of other news outlets also reported. theguardian.com/technology/202…
TikTok’s head of privacy in Europe said in the update that: “Based on a demonstrated need to do their job, subject to a series of robust security controls and approval protocols, and by way of methods that are recognised under the GDPR …
Read 6 tweets
Nov 2
How can open source investigators research the invasion of Ukraine using TikTok?

@ciaranoconnor provides updated tools and techniques, building on Bellingcat’s first guide to TikTok published in 2020 bellingcat.com/resources/how-…
@ciaranoconnor Before we begin, you can read and refer back to that first guide here: bellingcat.com/resources/2020…
@ciaranoconnor TikTok has emerged as a key platform on which footage of the invasion of Ukraine is shared.

Disinformation about the invasion can also be found on the site, including posts by Russian state-backed media and videos falsely claiming to show contemporary events Image
Read 19 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(