Sign in

Mathieu Gaucheler

@shibasec.bsky.social
193 followers 302 following 47 posts

OSINT and cybersecurity. SME at Maltego. Maltego machines / custom Transform / Talks in my GitHub: github.com/shibaOSINT/MaltegoMachines Medium: medium.com/@shibaosint

PostsRepliesMedia
Reposted by Mathieu Gaucheler
Layer 8 Conference and Podcast @layer8conference.com · 23/03/2026
On today's Layer 8 Podcast, we have @shibasec.bsky.social from Maltego talking about CTFs and investigations, including one where he lifted the curtain on pig butchering scams. He found it to be a "scam as a service" offering with scripts, personas and more. open.spotify.com/episode/3fKd...
open.spotify.com
Episode 139: Mathieu Gaucheler of Maltego
021
Mathieu Gaucheler @shibasec.bsky.social · 18/02/2026
Since our CTF closed yesterday, I thought I would do a quick recap of the problems I encountered (and how to solve them) when writing challenges. medium.com/@shibaosint/...
medium.com
How to write an OSINT CTF
I helped organise and create several CTFs in the last two years both for professionals and amateurs. In this blogpost, I would like to go…
010
Mathieu Gaucheler @shibasec.bsky.social · 10/02/2026
Maltego community CTF happened last Saturday, it was a wild 4h ride. If you missed it do not worry: we are leaving the platform open until February 17! Go to maltego.ctfd.io and give it a shot. There is something for everyone, regardless of your experience level. No paid tools needed.
110
Mathieu Gaucheler @shibasec.bsky.social · 06/02/2026
Maltego is organizing an OSINT CTF. It will run tomorrow from 15:00 to 19:00 CET. Every level is welcome, no paid tools needed. Feel free to drop in and test the waters or to compete seriously and try to win a prize. Registration here: maltego.ctfd.io. You can also go to our Discord to find a team ⬇️
maltego.ctfd.io
Maltego Community OSINT CTF
111
Mathieu Gaucheler @shibasec.bsky.social · 24/10/2025
Ever wanted to explore the @icij.org Offshore Leaks Database in Maltego? You can now do so with this local integration. ➡️https://github.com/shibaOSINT/Offshore-Leaks-Database-Maltego-Integration⬅️
020
Mathieu Gaucheler @shibasec.bsky.social · 21/10/2025
A short thread about an interesting geolocation challenge from Hack.lu CTF by @fluxfingers.net 🧵⬇️(1/5) #geolocation #geoguessr #OSINT
110
Reposted by Mathieu Gaucheler
Conflict Research @conflictwatch.bsky.social · 19/08/2025
#BurkinaFaso Geolocations of the JNIM attack on Tanwalbougou (12.0554, 0.7805) by @chrisadayton.bsky.social & @ influhunter (on X)
073
Reposted by Mathieu Gaucheler
Conflict Research @conflictwatch.bsky.social · 14/06/2025
14.06 #Mali According to a government communique, while returning from a mission yesterday (presumably taking part in the airstrike against FLA fighters near Aguelhok) the Su-24 was forced to ditch in the Niger river near Gao due to "adverse atmospheric conditions"
26616
Reposted by Mathieu Gaucheler
Christiaan Triebert @trbrtc.bsky.social · 08/05/2025
Cool open-source investigative tool I just learned about: alltext.nyc. It lets you search any text found in Google Street View images from 2007 to 2024— graffiti, shop signs, street text, you name it. Just type in what you see, and see what pops up.
47827
Reposted by Mathieu Gaucheler
ryan fae @ryanfae.bsky.social · 30/04/2025
ICYMI: on Twitter, an OSINTer ('Vleckie') is being blamed for a US airstrike in Yemen that killed 8 civilians. in a thread, she'd marked a group of houses as an underground bunker — from satellite imagery alone. those houses (not a bunker) were subject to a US airstrike. 8 innocent people dead.
a post by Vleckie: "Allright, time for me to go through the mud.
Based on satellite imagery I'd marked this quarry as an underground base, and tweeted is out as such. 
I'm fairly certain Centcom doesn't take their targeting data from Twitter, but this still is a very severe mistake."
11681152
Mathieu Gaucheler @shibasec.bsky.social · 04/05/2025
"These are the first two fighter jets in history to be downed by an uncrewed surface drone, but they are unlikely to be the last."
020
Mathieu Gaucheler @shibasec.bsky.social · 22/04/2025
🇲🇱🇷🇺 A Wagner affiliated Telegram channel posted this awkward photoshop yesterday, saying the people in the picture support LGBT rights, identifying them as "Azawad shepherds". Let's take this as an occasion to learn how to find the context of a doctored picture and prove the trickery 🧵⬇️ #Wagner #Mali
Caption:
🌴🇲🇱 Азавадские пастухи, как и их чубатые братишки, на самом деле стоят за западные ценности, чуждые здоровому человеку. Всë остальное, звучащее с их ротовых полостей, обман.  
ЛГБТ, бача-бази, скотоложество, наркотрафик, контрабанда золота и оружия, работорговля, терроризм - неполный перечень их борьбы.
100
Reposted by Mathieu Gaucheler
Global Investigative Journalism Network @gijn.org · 22/04/2025
In this upcoming GIJN webinar, we’ll explore how investigative journalists can document human rights abuses in war zones, with a focus on methods to ensure the info gathered can later be used by legal investigators or international courts. Register now: twp.ai/9PQx3o
twp.ai
gijn.org
GIJN Webinar: Gathering Evidence and Documents in Conflict and War Zones — A MENA Case Study
022
Reposted by Mathieu Gaucheler
Internet Archive @archive.org · 17/04/2025
📢 The Internet Archive needs your help. At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine. Tell the labels to drop the 78s lawsuit. 👉 Sign our open letter: www.change.org/p/defend-the... 🧵⬇️
Defend the Internet Archive.
Protect the Wayback Machine.
Tell the music labels: Drop the 78s lawsuit.
Sign our open letter on change.org
1181943115543
Reposted by Mathieu Gaucheler
Tib3rius @tib3rius.bsky.social · 15/04/2025
BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
35672409
Mathieu Gaucheler @shibasec.bsky.social · 07/04/2025
New blogpost about a military convoy (100+ containers) in #Mali. #OSINT #Geolocation #FAMAs #AfricaCorps #WagnerPMC
medium.com
Looking at an arms convoy in Mali
Thanks to social media, it is increasingly easy to find footage of military activity. Before the 2022 invasion of Ukraine, several OSINTers…
010
Mathieu Gaucheler @shibasec.bsky.social · 01/04/2025
The 27th of March, the Telegram channel White Uncles in Africa shared the following video of containers moving through Bamako. Let's take a look at what we can gather 🧵⬇️
131
Reposted by Mathieu Gaucheler
Marine Turchi @marineturchi.bsky.social · 31/03/2025
Affaire des assistants : Marine Le Pen condamnée et inéligible. Une affaire révélée dès 2013-2014 par @mediapart.fr. www.mediapart.fr/journal/fran...
Une de Mediapart ce lundi : Marine Le Pen au tribunal correctionnel de Paris avec son assistante Catherine Griset.
515139
Reposted by Mathieu Gaucheler
Michael Colborne @colborne.bsky.social · 21/03/2025
In Viktor Orbán's Hungary you're perfectly OK organizing neo-Nazi concerts over and over again, even if you're part of a group banned/designated as a terror group in multiple countries But Pride, let alone protesting a Pride crackdown as an opposition party, gets you banned.
0359
Reposted by Mathieu Gaucheler
Bellingcat @bellingcat.com · 03/03/2025
We’re back with the Bellingcat Open Source Research Challenge! Starting today, we’ll release a series of five brand new challenges to test your digital investigative skills every month. www.bellingcat.com/resources/20...
bellingcat.com
The Bellingcat Open Source Challenge is Back - bellingcat
Test your open source research skills with the Bellingcat Challenge – a new resource for all levels of online investigators.
2421118
Reposted by Mathieu Gaucheler
Catalin Cimpanu @campuscodi.risky.biz · 02/03/2025
French security firm LEXFO has published a report that analyzes the underground world of document forgers. Most of this ecosystem appears to have moved from the dark web to the clear web—for some reason blog.lexfo.fr/the-business...
Screenshot of a clear web website selling forged US ID cards and driver's licenses
093
Mathieu Gaucheler @shibasec.bsky.social · 12/02/2025
According to their Telegram channel, Africa Corps (Африканский Корпус) is opening new "selection points" (forgive the dodgy Google Translate output) in Kazan, Naberezhnye Chelny, Nizhny Novgorod and Krasnodar. Interestingly enough, the amount of money promised for signing up depends on the place.
New logo for the African CorpsScreenshot of a video attached to the post. Translation from Google Translate: Africa Corps Russian Ministry of DefenseScreenshot of a video attached to the post. Translation from Google Translate: Africa Corps continues recruitment. From 25 to 45 years old. Specialists up to 55 years old.
110
Reposted by Mathieu Gaucheler
Eliot Higgins @eliothiggins.bsky.social · 12/02/2025
New from Bellingcat's environmental team - The Hunt for Malaysia's Elusive Wildlife Trafficker www.bellingcat.com/news/2025/02...
bellingcat.com
The Hunt for Malaysia's Elusive Wildlife Trafficker - bellingcat
After a decade of elusive wildlife trafficking, we traced one anonymous dealer to a house in Malaysia, all thanks to a customer complaint.
819755
Reposted by Mathieu Gaucheler
Christiaan Triebert @trbrtc.bsky.social · 09/02/2025
Incredible referencing guide for Google StreetView, and therefore for geolocation in general: license plates, sign posts, types of bollards, roof tiles, etc. Thanks @aric.bsky.social for sharing. plonkit.net/guide
713141
Mathieu Gaucheler @shibasec.bsky.social · 03/02/2025
Go checkout this amazing and beginner friendly webinar by @gijn.org to learn how to source satellite images and how to use them.
youtube.com
How to Acquire Free Satellite Imagery for Your Investigations
YouTube video by Global Investigative Journalism Network
030
Reposted by Mathieu Gaucheler
Bellingcat @bellingcat.com · 20/01/2025
Adverts selling an opioid up to 500 times stronger than heroin are all over the internet, from social media platforms to trade sites. Bellingcat and partner Postimees investigate how this deadly drug is infiltrating Europe and beyond… www.bellingcat.com/news/2025/01...
bellingcat.com
Chinese Suppliers Behind Ads Deadly For Nitazenes Targeting Europe
Investigation finds more than 1,000 online ads for nitazenes, including from Chinese companies, and links European shipments of the deadly drugs to China.
16431198
Reposted by Mathieu Gaucheler
Mathieu Gaucheler @shibasec.bsky.social · 17/01/2025
Time for an small OSINT investigation before the weekend. Click on this thread for a walkthrough. Spoilers ahead 🧵⬇️🦒
211
Mathieu Gaucheler @shibasec.bsky.social · 17/01/2025
Time for an small OSINT investigation before the weekend. Click on this thread for a walkthrough. Spoilers ahead 🧵⬇️🦒
211
Reposted by Mathieu Gaucheler
Sofia Santos @gralhix.bsky.social · 17/01/2025
🕵️ OSINT Exercise #031 is out! 🌡️Level: Beginners: Easy; Experts: Easy. ⏰Solution with full walkthrough will be uploaded to YouTube in the weekend. 🙊Have fun and no spoilers! #osintchallenge gralhix.com/osint-exerci...
gralhix.com
OSINT Exercise #031
Welcome to OSINT Exercise #031! Task briefing: The newborn giraffe seen in the photo below belongs to an endangered species. Individuals such as this one, born in captivity, often participate in co…
0143
Reposted by Mathieu Gaucheler
Jake Creps @jakecreps.bsky.social · 16/01/2025
The latest issue of The #OSINT Newsletter is now live. Using Raw Audio for OSINT (Geolocation) Plus the latest news, tools, tactics, and techniques. H/T: @cybdetective.bsky.social and more... osintnewsletter.com/p/62
osintnewsletter.com
The OSINT Newsletter - Issue #62
The latest and greatest in OSINT news, tool, tactics, and techniques
041
Mathieu Gaucheler @shibasec.bsky.social · 16/01/2025
Here's my write-up of the 3rd week of #OSINT challenges from @bellingcat.com: Urban Exploration. On the menu: dumpster based geolocation, baseball investigation and using a reflection to locate a bridge! medium.com/@shibaosint/... #Bellingcat #Geolocation #Writeup #OverpassTurbo #OSM
010
Reposted by Mathieu Gaucheler
Mathieu Gaucheler @shibasec.bsky.social · 06/01/2025
I finished writing about week #2 of the @bellingcat.com challenges: Maritime Mysteries It touches on synoptic codes from a Russian ship, identifying a vessel from a picture and checking if an image was digitally altered! #OSINT #Bellingcat #Geolocation #Writeup
medium.com
Bellingcat Challenges: Maritime Mysteries
Continuing this series of write-up explaining how to solve the OSINT challenges offered by Bellingcat for the end of 2024. The tools used…
121
Reposted by Mathieu Gaucheler
Naval News @navalnews.com · 05/01/2025
The Russian Navy is significantly weakened in the Mediterranean. The Improved Kilo Class submarine Novorossiysk (B-61) has just left, leaving no Russian submarines in the Mediterranean 🇷🇺🇸🇾 Story by @covertshores.bsky.social www.navalnews.com/naval-news/2...
navalnews.com
After loss of Tartus, Russia now has no submarines in the Mediterranean - Naval News
The Russian Navy is significantly weakened in the Mediterranean. The only boat known to be there has just left, leaving no Russian submarines in the Mediterranean.
21730169
Mathieu Gaucheler @shibasec.bsky.social · 06/01/2025
I finished writing about week #2 of the @bellingcat.com challenges: Maritime Mysteries It touches on synoptic codes from a Russian ship, identifying a vessel from a picture and checking if an image was digitally altered! #OSINT #Bellingcat #Geolocation #Writeup
medium.com
Bellingcat Challenges: Maritime Mysteries
Continuing this series of write-up explaining how to solve the OSINT challenges offered by Bellingcat for the end of 2024. The tools used…
121
Reposted by Mathieu Gaucheler
Cyber Detective @cybdetective.bsky.social · 22/12/2024
Bellingcat Globetrotters Writeups Detailed descriptions of Bellingcat challenges (challenge.bellingcat.com) solutions from @shibasec.bsky.social: #1 — A Sticky Situation #2 — Flamin-Go Find It! #3 — Pulling Focus #4 — The Rider's View #5 — Lost in the Fog medium.com/@shibaosint/... #geoint
0174
Mathieu Gaucheler @shibasec.bsky.social · 20/12/2024
Did you solve the OSINT challenges from Bellingcat yet? Here is my writeup for the first week: medium.com/@shibasec_35... #OSINT #Bellingcat #Geolocation #writeup
medium.com
Bellingcat Challenges: Bellingcat Globetrotters
Christmas came early this year thanks to the excellent people at Bellingcat. They provided us with OSINT challenges. This is a write-up of…
010
Reposted by Mathieu Gaucheler
Cyber Detective @cybdetective.bsky.social · 17/12/2024
Find That Spot A tool that allows to search the map for objects that match a text description. Based on OverPass Turbo, but does not require knowledge of query language, works faster and with large areas. findthatspot.io Creator @tlmn.bsky.social #osint #geoint
24012
Reposted by Mathieu Gaucheler
Joseph Cox @josephcox.bsky.social · 16/12/2024
New: Cellebrite is being used as doorway to install malware. Amnesty finds multiple cases where police used Cellebrite to unlock phone; cops then used that access to infect with spyware which takes screenshots, turns on mic, etc, give phone back to target. In Serbia www.404media.co/cellebrite-u...
417398
Reposted by Mathieu Gaucheler
Ozgur Can Seckin @ozgurcanseckin.bsky.social · 12/12/2024
🚨Our new paper is on arXiv! We’re excited to share 26 state-backed information operation (IO) datasets, each paired with a robust control set of 13M+ posts in total from non-IO accounts. You can reach the dataset here: zenodo.org/records/1418...
zenodo.org
Labeled Datasets for Research on Information Operations
Labeled Datasets for Research on Information Operations Compliance with Platform Terms To comply with the platform terms, we ask that you download one data file per researcher, per day. By requesting ...
1127
Mathieu Gaucheler @shibasec.bsky.social · 11/12/2024
Challenges from @bellingcat.com going well so far! I'll do a writeup later this week (after verifying it's allowed). Thanks to @nitishchandan.bsky.social for the help! Try it for yourself at challenge.bellingcat.com
000
Reposted by Mathieu Gaucheler
Benedict Garman @benedictgarman.com · 10/12/2024
Evidence of IDF beyond edge of buffer zone in Syria. This photo captured about 0.7kms into #Syria, approx 32.996983, 35.884601. Source: x.com/ytirawi/stat... IDF have since confirmed its troops are operating beyond the demilitarised buffer zone in the Golan Heights: www.bbc.co.uk/news/live/cj...
1321158
Reposted by Mathieu Gaucheler
Dark Web Informer @darkwebinformer.com · 09/12/2024
💡DDoS Secrets released Library of Leaks; Search documents, companies, and people: search.libraryofleaks.org
041
Mathieu Gaucheler @shibasec.bsky.social · 04/12/2024
Have you ever wondered how investigative journalist take advantage of Maltego and open source data? Be sure to check out tomorrow's webinar with @reflets.info , @kitetoa.reflets.info and Shaman for a presentation of their Pappers.fr Transforms! www.maltego.com/event-regist...
maltego.com
Unlock Corporate Intelligence with Reflets and Maltego
Join us for an exclusive joint webinar exploring how Maltego's data integration empowers professionals to access and analyze cross-border corporate data. Gain strategic insights for compliance, due di...
043
Reposted by Mathieu Gaucheler
Sector035 @sector035.bsky.social · 02/12/2024
Finally, after years of searching, an old #geolocation challenge by X user CountryTec was solved last week. Thanks to @fstegers.bsky.social and the awesome hint provided by X user FlowAddicted! Read about the long journey to the solution here: sector035.nl/articles/lak...
sector035.nl
2249
Reposted by Mathieu Gaucheler
Eoghan @eoghanmacguire.bsky.social · 01/12/2024
I did a session for @icfjorg.bsky.social last month about how open source investigative techniques can aid reporters. ICFJ have very kindly produced a short write up and listed some useful tools ijnet.org/en/story/fun...
ijnet.org
Fundamentals of open-source intelligence for journalists
Open-source intelligence (OSINT) – the gathering and analysis of publicly available information found on social media, and in databases and government records – can be invaluable in situations when in...
32215
Reposted by Mathieu Gaucheler
Kevin Rothrock @kevinrothrock.me · 23/11/2024
hard to exaggerate how nuts the engagement is on Bluesky compared to 𝕏. a vastly smaller user base (at least officially), but just look at these stats for one of the biggest newspapers on Earth. Musk has absolutely trashed the platform. folks, you are not locked in on 𝕏. not even a little.
20884081662
Mathieu Gaucheler @shibasec.bsky.social · 29/11/2024
Now that I'm more active on Bsky, here's the article I wrote about Sofia Santos's OSINT exercise 26⏬⏬⏬ medium.com/@shibasec_35...
medium.com
Geolocation: OSINT Exercise #026 from Sofia Santos
This is a write-up for Sofia “Gralhix” Santos’ OSINT exercise #026. The goal of this exercise is to use the four pictures below and one…
151
Reposted by Mathieu Gaucheler
Forbidden Stories @forbidden-stories.bsky.social · 21/11/2024
REVELATIONS. A Central African journalist, Ephrem Yalike, reveals the dark secrets of Russian disinformation campaigns. He was a part of it. Now, he’s risking his life to expose the truth. #PropagandaMachine forbiddenstories.org/in-the-centr...
forbiddenstories.org
In the Central African Republic, a former propagandist lifts the veil on the inner workings of Russian disinformation
Central African journalist Ephrem Yalike offers evidence revealing, for the first time, the relentless influence exerted in his country by Russia.
13734