People and user intelligence
People OSINT focuses on collecting information about a person’s names, address, telephone numbers, usernames, and even their social media accounts. Such information is useful when identifying the employees of a targeted organization and improving social engineering attacks to gain a foothold within the target’s network. People often create social media accounts and add their company, job title, and contact details, which helps threat actors to easily harvest such data when planning their attacks. For instance, employees sometimes include their company’s email address in their contact information on social media platforms such as LinkedIn and Facebook.
Organizations use various formats for their employees’ email addresses, such as the following:
firstname @ domain .comfirstnameinitial + lastname @ domain .comfirstname.lastnameinitial @ domain .comfirstname + lastnameinitial @ domain .comfullname...
