
Co-Founder, Forensic OSINT [email protected]
Canada 🇨🇦
Joined May 2016
- Tweets10.3K
- Following504
- Followers73.6K
- Likes22.1K
Pinned Tweet
🚨I've been tracking Metro Vancouver Shootings 🚨 The BC Gang Conflict since 2021. Check out the map here.
Red for public shootings and black for residential shootings. The colour difference highlights public safety concerns.
tinyurl.com/LMDGC
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance. buff.ly/9Fa2jBW
OSINT Techniques retweeted
If hackers can take control of a supermarket freezer, how vulnerable is other tech? bbc.in/4eIwcUK
Outsourcing planning to AI can lead people to surrender their own critical thinking, which can have potentially deadly results in places like the backcountry. buff.ly/sNs5kqF
OSINT Techniques retweeted
The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor."
The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.
How You Can Help:
FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.
A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…
OSINT Techniques retweeted
Hey everyone, we have heard your concerns about Proton’s AI strategy and culture and after internal discussions, we want to share a few things with you.
First, Proton does not install tracking software on employees' laptops to measure how much AI-generated code they produce. This rumor stemmed from a misunderstanding about how MDM software works, and it's not true.
Second, our use of AI will never be at the expense of security. In the past year, contrary to what has been alleged, additional layers of security review have been added to meet the threat posed by hostile AIs scanning Proton's open-source code for vulnerabilities. Our code is open source, and its security remains open for all to verify.
We want to prove this to you, so in the interest of transparency, we will lift the hood on how we use AI internally at Proton. This includes publicly releasing and open sourcing several of the internal tools that we use, including more advanced versions of Lumo with greater capabilities, which have never been made available outside of the company.
We will also publish how code reviews and security reviews at Proton are done, and detail our AI policies, including where AI is permitted, and where it is not, and our rationale. Instead of just being able to see the final open-source code that we produce to verify security, you will also be able to assess how that code was produced.
Lastly, we are not re-interviewing our staff about AI usage, and there are no job losses due to AI re-interviews.
You can hold us to these commitments. We're aware that we haven't lived up to the high standard you ought to hold us to, and for that we can only apologize, we are sorry.
OSINT Techniques retweeted
Anyone can access public information. Making it something that can be "explained, reproduced and defended" is the work.
The Canadian OSINT Centre's first white paper looks at why methodology matters for OSINT in Canada.
🔗 linkedin.com/posts/the-canad…
OSINT Techniques retweeted
No cited post URL, no finding.
Nico Dekens on using Grok to map an X account leads this week's Friday 5, plus Bellingcat's satellite pair, OPSEC, a due diligence story (fiction) and my career guide for teens and mentors.
🔗 forensicosint.com/newsletter
#OSINT
OSINT Techniques retweeted
ADL has identified at least 8 mass attackers since 2024 who were active on one gore forum before they attacked.
Its new piece explains memetic violence, where the attack is built to be content, and points to a field guide on the language.
🔗 linkedin.com/pulse/when-viol…
OSINT Techniques retweeted
Australian mushroom murderer Erin Patterson loses appeal to overturn convictions - follow live bbc.in/4A24RoD
OSINT Techniques retweeted
Massive leak exposes 41,000 DHS workers and undercover ICE agents arstechnica.com/security/202…
OSINT Techniques retweeted
Forensic OSINT v3.8.1 is out. Elite Assisted Capture now covers Facebook, Instagram, TikTok, and LinkedIn.
Facebook discovery is up to 5x faster.
Sort and filter the list before you capture.
forensicosint.com/whats-new #OSINT
OSINT Techniques retweeted
OSMOSIS was a banger back in my government days—and it still matters just as much now in private industry. 😎
The OSINT community all in one place: learn, connect, share, and put faces to names.
Where OSINTers belong. 🕵️♂️
📍 Las Vegas | 📅 May 2027
OSINT Techniques retweeted
Article by @OSINTtechniques for @whitehatterteam
"So You Want a Career in OSINT? A Guide for Teens and Parents"
thewhitehatter.ca/post/so-yo…
OSINT Techniques retweeted
I recorded this demo and kept thinking: I wish I had this years ago.
It is a first look at Instagram Assisted Capture, coming soon to the Forensic OSINT extension.
Capturing a profile properly means opening every post, expanding every comment thread and clicking through every photo in a carousel. Do that for a month of posts and the afternoon is gone. Meanwhile, posts and comments can be deleted at any time.
In the video:
✅ Pick a date range and see which posts fall inside it
✅ Review the list, search it by keyword, export it to CSV
✅ Approve the posts and watch each one get opened, expanded and captured
✅ Check the case: comments loaded against the count Instagram reports, SHA-256 on every file
Nothing is captured until you confirm. You can pause or stop at any point, and your job is to observe and confirm each capture.
Capture will be part of the Elite Assisted Capture plan. Discovery is part of Elite.
How much time would you save on your current captures?
OSINT Techniques retweeted
Breaking News: Meta must pay $25 billion, one of the largest penalties levied against the tech giant, for deceiving users about data privacy. nyti.ms/4yvv5yZ
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising. buff.ly/sZJ4jBr
OSINT Techniques retweeted
🔍 Sponsor Spotlight: Forensic OSINT!
Thanks to @ForensicOsint for supporting the Trace Labs Global OSINT Search Party CTF on Oct 24! Their Chrome extension captures hashed, timestamped, court-ready evidence. 💙
🔗 forensicosint.com
#OSINT4GOOD #TraceLabs #OSINT #CTF
OSINT Techniques retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
OSINT Techniques retweeted
I saw a lot of impressive pieces over the past month in the digital investigations & OSINT space.
Here's five to bookmark and check out 👇
1. youtube.com/watch?v=FBeMrUWX…: Almost four years of community detective work by @georainbolt and the team to find where a photograph of a woman and her late mother was taken.
2. youtube.com/watch?v=g3toZwkr…: @bilawalsidhu and a growing community are bringing scattered public datasets together in an open-source mapping project.
3. nitter.gq/thomasbordeaux7/status…: @ThomasBordeaux7 & @Gabor_Friesen geolocated scenes from a journalist’s 2012 captivity video, contributing to the wider investigation into his disappearance.
4. theguardian.com/global-devel…: Important reporting by @guardian, combining survivor testimony, satellite imagery and verified footage to document rebel forces’ destruction of Rohingya villages in Rakhine, Myanmar.
5. nitter.gq/Nrg8000/status/2102977…: @Nrg8000 preserved high-resolution aerial imagery of northern Gaza from GovMap, where parts were subsequently obscured again. See it on @SoarAtlas here: soaratlas.com/maps/asia-isra…
These were in my OSINT Field Notes newsletter. Here's the full thing:
osintfieldnotes.substack.com…
OSINT Techniques retweeted
🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas.
These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms.
Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity.
Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms.
justice.gov/opa/pr/justice-d…























