Blog

A targeted phishing campaign used a fake Bloomberg persona, a real Calendly link and a convincing X OAuth flow to pursue people in AI and OSINT. This investigation follows the chain from social engineering to a fake “Twitta” login page, maps the public targeting pattern, and shows how to verify an interview request before it costs you an account.

AI can generate a convincing Amsterdam street that never existed, then fail to recognize its own fiction when asked to geolocate it. This experiment shows why visual plausibility is no longer proof. For OSINT practitioners, the lesson is clear: seeing is not believing. Only provenance, source tracing, corroboration, and disciplined geolocation tradecraft can separate synthetic evidence, from reality in an internet where images can lie with confidence and false places can feel

Evidence poisoning is the contamination of the open web with synthetic, manipulated or amplified material that later appears useful as investigative evidence. In an age of AI slop, fake personas, recycled footage and algorithmic summaries, OSINT practitioners must ask not only whether a source can be found, but whether it was manufactured to be found.