22/08/2025
🔔 Awareness on OSINT & HUMINT 🔍
Friends, attackers usually use two common methods to trap people ⚠️:
📌 OSINT (Open Source Intelligence):
🖼️ They collect your public data from social platforms (🌐 Facebook, 💬 WhatsApp DP, 👔 LinkedIn, 📸 Instagram).
🔎 They use tools like Reverse Image Search to find more of your details linked to your picture.
🧩 Step by step they build your digital profile (🎓 education, 🏙️ city, 👥 friends, 💼 job, 📧 email, etc.).
📌 HUMINT (Human Intelligence):
💭 If OSINT is not enough, they directly talk to you or your friends.
💬 Through normal conversation, they ask small questions:
❓ “Where are you from?”
❓ “Which college?”
❓ “What’s your email?”
🧠 Slowly, they connect those answers with OSINT data and create a bigger picture of you.
⚠️ Reminder:
🚫 Never overshare your data.
📷 Even a simple profile picture or casual chat can be used to track you.
🛡️ Stay smart, stay cautious, and if you ever feel doubtful, consult the 🔐 cybersecurity professionals & experts first.
Scammers are indeed using various tactics to trick victims into divulging sensitive information or gaining unauthorized access. Here are some common methods:
1. OTP (One-Time Password) scams: Scammers send fake emails or messages claiming to be from a legitimate source, such as a bank or online service, asking victims to share their OTPs. Once obtained, the scammers can use the OTPs to gain access to the victim's account.
2. Phishing email links: Scammers send emails with malicious links that appear to be from a legitimate source. When clicked, these links can download malware, steal login credentials, or redirect victims to fake websites designed to extract sensitive information.
3. Email access scams: Scammers may try to gain access to a victim's email account by sending phishing emails or using malware to steal login credentials. Once they have access, they can use the email account to reset passwords, gain access to other accounts, or steal sensitive information.
4. Social engineering tactics: Scammers may use psychological manipulation to trick victims into divulging sensitive information or performing certain actions. This can include pretending to be a trusted authority figure, creating a sense of urgency, or using emotional appeals.
To protect yourself from these scams:
- Be cautious when receiving unsolicited emails or messages, especially those asking for sensitive information.
- Verify the authenticity of emails and messages by contacting the supposed sender directly.
- Avoid clicking on suspicious links or downloading attachments from unknown sources.
- Use strong, unique passwords and enable two-factor authentication (2FA) whenever possible.
- Keep your software and operating system up-to-date with the latest security patches.
- Monitor your accounts and credit reports regularly for any suspicious activity.
