Dutch guy with Open Source Intelligence & Analysis skills • OSINT • Principal Instructor @SANSInstitute • SVP of engineering & Chief Innovator @shadowdragonio
Netherlands
Joined May 2016
- Tweets6.4K
- Following1.6K
- Followers39.3K
- Likes7.1K
ICYMI the phishing campaign is still ongoing !
A real Calendly link. A fake Bloomberg interview. A phising chain designed to target people in AI and osint.
The first domain was genuine. The downstream workflow was not.
I break down how the campaign worked—and the checks that matter before you trust an “interview” invite. 🎥
Read the blog here:
dutchosintguy.com/post/phish…
#OSINT #phising
Federal prosecutors allege that #OpenAI engineer Abdulrahman Alfozan secretly installed an audio-recording device in an executive conference room to capture sensitive discussions.
He was arrested and charged with intercepting oral communications; the allegations remain unproven.
Using @ShadowDragonIO Horizon’s Identity and Investigate capabilities, I rapidly resolved Alfozan’s aliases, professional history, public accounts, and developer footprint into a single investigative graph.
Pivots from confirmed identifiers exposed his GitHub ecosystem and a reciprocal connection to a likely spouse account, while open-source media and professional-context research produced a lead involving Saudi Crown Prince Mohammed bin Salman.
The work demonstrates how quickly OSINT can map a subject’s public digital presence and relationship leads; sensitive findings are deliberately withheld.
justice.gov/opa/pr/saudi-nat…
@OpenAI @TheJusticeDept #OSINT
A real Calendly link. A fake Bloomberg interview. A phising chain designed to target people in AI and osint.
The first domain was genuine. The downstream workflow was not.
I break down how the campaign worked—and the checks that matter before you trust an “interview” invite. 🎥
Read the blog here:
dutchosintguy.com/post/phish…
#OSINT #phising
I've created a little monitoring dashboard that keeps a track of this ongoing phishing campaign. You van view it here : dutchosintguy.github.io/X-ph…
France’s 17 October mobilisation may be less about who started it than what happens next.
The key signal: separate grievance networks moving from the same date to the same locations, logistics and triggering events.
New case study: dutchosintguy.com/post/from-…
#OSINT #France
New Blog:
A public-sector investigator can spend hours manually searching Google, public registries, maps, news archives and social media.
But when that same investigator asks to use a controlled OSINT tool to search, verify, preserve or analyse information from those same public sources, the answer is often: “No. It is automated.”
That is not a legal framework.
It is not risk management.
The real questions are about authority, necessity, proportionality, data handling, retention, vendor access, verification and oversight. Those questions need answers.
Legal teams and leadership should help investigators find the lawful, proportionate and accountable way forward - not stop at an unexplained no.
The evidence is public. The obstacle is internal.
Read the full blog: dutchosintguy.com/post/googl…
Where does your organisation draw the line between responsible OSINT and reflexive risk avoidance?
#OSINT #OpenSourceIntelligence #PublicSafety
New Blog:
Real Calendly link. Claimed Bloomberg interview. Phishing chain.
I followed a targeted X DM from a tailored #OSINT/#AI pitch to OAuth abuse and a fake login page—and mapped 99 publicly approached accounts.
Checking the first domain isn’t enough. Follow the chain. 🧵 > Link in post below
#phishing
What would make you stop and verify an “interview request” before clicking?
#OSINT #Phishing #CyberSecurity
I've started to uncover more already. I now have 2 more x.com accounts doing the exact same phising dm trick. Will expand my findings on my blog once done
A professional milestone I’m genuinely proud of.
I’ve been promoted by SANS to Principal Instructor.
Teaching OSINT and intelligence analysis has always been a passion, but it’s the interaction with students (the questions, challenges and discussions) that makes it so rewarding.
Thank you to @SANSInstitute Institute for the recognition, opportunity and trust, and to every student who has been part of that journey.
Principal Instructor, but forever a student of the craft.
Reminder: ABC #OSINT
A = Assume Nothing
B = Believe Nothing / No one
C = Challenge / Check everything
#disinformation #fakenews #psyop
ICYMI #overasselt
There was a horrific incident in the city of Overasselt (Netherlands) that hit the global news yesterday. It is a drugs cartel related case. I've created a Dossier on this that will track this case and update every 12 hours.
You can visit the site here: dossier-overasselt.pplx.app/
Context:
Over the past 48 hours, Overasselt has been shaken by a major, fatal shooting and a large police operation.
Early Tuesday morning, at around 04:00, police responded to a suspicious situation at a house on Ewijkseweg. When officers arrived, they were fired upon. A 51-year-old man from Wijchen was found critically injured and later died.
Two police officers were also shot. They were taken to hospital and are now out of life-threatening danger. Colleagues reportedly gave them emergency treatment while the scene was still unsafe.
The incident involved a large group of masked individuals, some apparently armed. Police are reviewing footage and investigating what happened, who fired the shots, and the role of each person involved.
At least 34 people have been arrested in and around Overasselt, including during operations near Nijmegen station and on the A73 and A76 motorways. Police have seized weapons, vehicles, and digital devices. Some reports indicate a possible additional arrest overnight, but the official count remains 34.
The suspects include people from the Netherlands, Belgium, France, and Algeria. They are being questioned individually, and authorities have not yet announced charges or established responsibility.
Police and prosecutors describe the background as a possible long-running conflict. The property involved had also been targeted in a shooting last year. Media reports have speculated about an organised-crime or drug-conflict connection, but this has not been officially confirmed.
The stay-indoors advisory for Overasselt and nearby Nederasselt has been lifted. Police say there is no indication that suspects are still hiding locally, though the investigation and extra patrols remain ongoing.
#OSINT #overasselt #ewijkseweg
There was a horrific incident in the city of Overasselt (Netherlands) that hit the global news yesterday. It is a drugs cartel related case. I've created a Dossier on this that will track this case and update every 12 hours.
You can visit the site here: dossier-overasselt.pplx.app/
Context:
Over the past 48 hours, Overasselt has been shaken by a major, fatal shooting and a large police operation.
Early Tuesday morning, at around 04:00, police responded to a suspicious situation at a house on Ewijkseweg. When officers arrived, they were fired upon. A 51-year-old man from Wijchen was found critically injured and later died.
Two police officers were also shot. They were taken to hospital and are now out of life-threatening danger. Colleagues reportedly gave them emergency treatment while the scene was still unsafe.
The incident involved a large group of masked individuals, some apparently armed. Police are reviewing footage and investigating what happened, who fired the shots, and the role of each person involved.
At least 34 people have been arrested in and around Overasselt, including during operations near Nijmegen station and on the A73 and A76 motorways. Police have seized weapons, vehicles, and digital devices. Some reports indicate a possible additional arrest overnight, but the official count remains 34.
The suspects include people from the Netherlands, Belgium, France, and Algeria. They are being questioned individually, and authorities have not yet announced charges or established responsibility.
Police and prosecutors describe the background as a possible long-running conflict. The property involved had also been targeted in a shooting last year. Media reports have speculated about an organised-crime or drug-conflict connection, but this has not been officially confirmed.
The stay-indoors advisory for Overasselt and nearby Nederasselt has been lifted. Police say there is no indication that suspects are still hiding locally, though the investigation and extra patrols remain ongoing.
#OSINT #overasselt #ewijkseweg
I've created a site called Dossier Overasselt that will update every 12 hours breaking down this case: dossier-overasselt.pplx.app/ #osint #overasselt
The Netherlands #overasselt case is getting more serious by the minute. @Crimesite obtained some new footage with some serious threats.
What happened ? : Around , police received a report of a suspicious situation at a home on Ewijkseweg, where a large group of masked people had reportedly been seen.
When the first officers arrived, they were immediately fired upon. A critically injured 51-year-old man from Wijchen was found and later died. Two officers were shot and taken to hospital.
Police launched a major operation, including specialist arrest teams. Searches and arrests took place in Overasselt and surrounding areas, including near the A73, A76 and Nijmegen. Warning shots were fired during some actions.
By the end of the day, police had arrested 34 suspects. The two injured officers are out of immediate danger. The investigation is ongoing; police have not confirmed a motive or individual roles, so claims of a specific criminal connection remain unverified.
Source: Dutch Police politie.nl/nieuws/2026/septe…
Contextl: the same Ewijkseweg address was reportedly targeted in a separate shooting in June 2025, but authorities have not publicly confirmed a connection to this week’s incident.
I've created a site called Dossier Overasselt that will update every 12 hours breaking down this case: dossier-overasselt.pplx.app #osint #overasselt
improvements deployed dossier-overasselt.pplx.app/