How to Create a Sock Puppet for OSINT Investigations

How to Create a Sock Puppet for OSINT Investigations

 By Charles Joseph | Cybersecurity Advocate
 Last update: November 25, 2023

A sock puppet is an online identity that can be used for deception, privacy, or operational security (OPSEC) by investigators, journalists, or penetration testers.

Stay One Step Ahead of Cyber Threats

Want to Be the Smartest Guy in the Room? Get the Latest Cybersecurity News and Insights.
We respect your privacy and you can unsubscribe anytime.

OPSEC protects both the investigator and the target when evidence doesn’t lead anywhere.

7 Steps to Set Up a Sock Puppet

  1. Use a dedicated computer for investigations.
  2. Use an encrypted email service like Proton Mail.
  3. Get a burner phone number or a Wi-Fi phone number.
  4. Create a social media profile on a platform where your target is most active.
  5. Set up a few virtual machines.
  6. Create a blog or website (using free platforms like WordPress, Blogger, or Medium).
  7. Use a VPN.

SOURCE: Creating an Effective Sock Puppet for OSINT Investigations

Articles to Assist in Creating Sock Puppets

"Amateurs hack systems, professionals hack people."
-- Bruce Schneier, a renown computer security professional