There are two tracks to follow when creating a fake person. Additionally, impersonating a real person can often violate laws in the USA and other countries (particularly if that person is law enforcement or military). Usually, creating a fake person will violate the terms of service for most social media platforms, so if your goal is anything other than academic research purposes, it's probably worth re-thinking. Honeypots are commonly created by corporations to lure cybercriminals and filter BEC attempts directly to the security team. Nation state actors, or researchers seeking access to cybercriminals' dark web forums, often use active engagement to solicit sensitive information or build connections.
Passive recon sock puppets are often used by researchers or private investigators to avoid their target to knowing who is looking at their social media accounts. They can either be used for passive recon, active engagement, or honeypots. A sock puppet is a fake account which can be used to hide the true identity of the owner for operational security reasons (used by both attackers and security researchers).
0 kommentar(er)
