The Use of Black OSINT in Disinformation Operations and How White OSINT Can Be Used to Counter and Fact Check

Introduction

Open Source Intelligence (OSINT) stands at the intersection of truth and deception. OSINT techniques, when used ethically, are a powerful force for uncovering truth and countering deception. This article, part of a series from The Coalition of Cyber Investigators, explores how Black OSINT, the unethical use of OSINT, fuels disinformation and how White OSINT, when wielded responsibly, can counter these narratives by verifying facts and uncovering the truth[1].

Black OSINT – Operating on the Dark Side

Disinformation campaigns often thrive through the strategic misuse of OSINT, turning public information into a tool for manipulation. Black OSINT practitioners pull facts from context, inserting them into misleading narratives, shaping public opinion and influencing decision-makers. In extreme cases, this tactic can destabilise societies by sowing discord or damaging reputations[2].

A stark example occurred during the 2016 U.S. Presidential Election, as detailed in the Mueller Report on Russian interference. Russian operatives used OSINT techniques to gather data, which they later misused to manipulate public discourse and influence voter behaviour[3]. These methods can distort political messaging and create mistrust in democratic institutions.

The COVID-19 pandemic offers another example of how Black OSINT can intensify crises. During the pandemic, conspiracy theories about the virus’s origin and potential treatments proliferated. These narratives, built on the selective use of open-source data, led to protests, attacks on 5G towers, and violence against healthcare workers[4]. The World Health Organisation (WHO) has called this an "Infodemic" and developed tools to help healthcare professionals counter false health information[5][6].

White OSINT – The Knight in Shining Armor

For every manipulation by Black OSINT, White OSINT practitioners use the same tools to promote truth-seeking and verification. Fact-checkers and investigative journalists armed with OSINT play a crucial role in holding those in power accountable, verifying claims, and exposing falsehoods.

A notable example of White OSINT in action is Bellingcat’s investigation into the downing of Malaysia Airlines Flight 17[7]. Using publicly available satellite imagery, social media posts, and other open-source data, Bellingcat gathered evidence to identify the responsible parties. This not only informed the public but also supported official investigations.

During the COVID-19 "infodemic," global fact-checking organisations like the CoronaVirusFacts Alliance used OSINT to debunk over 10,000 false claims. This collective effort helped provide the public with accurate, reliable information and reduce the spread of misinformation[8].

The Blurred Boundaries

However, the line between Black and White OSINT is not always distinct. The same techniques used to uncover the truth can also be employed to mislead. Our cognitive biases can also cause us to accept OSINT-derived information that confirms our beliefs, even if it is inaccurate.

More concerning is that malicious actors have co-opted the language of fact-checking, creating fake fact-checking sites that appear legitimate but are designed to cast doubt on actual, verified information. This strategy creates confusion around well-established facts, undermines public trust, and makes it difficult for individuals to discern truth from fiction.

Research indicates that fact-checking’s effectiveness varies. For example, one study shows that fact-checking can help correct misbeliefs in young adults but may struggle to influence those who initially viewed the information negatively[9]. Furthermore, the wording of fact-checking reports can impact their effectiveness, emphasising the need for nuanced communication in debunking misinformation.

The Path Forward

OSINT practitioners are at a critical juncture. The power to inform or misinform comes with significant responsibility. If White OSINT is to prevail, practitioners must commit to evidence-based practices and an ethical framework that prioritises truth over agenda. This ethical framework should include principles such as transparency, accuracy, and respect for privacy, ensuring that OSINT is used responsibly and for the public good[10].

A critical step is the development of standardised methodologies for evidence gathering, verification, and intelligence grading within the OSINT community. Moreover, public media literacy must be improved. Programs like Finland’s anti-fake news initiative, which teaches critical thinking skills and source evaluation in schools, provide a model for fostering more discerning people[11].

Technology also has an essential role to play. Artificial Intelligence (AI) is already being deployed to detect digital manipulation. For instance, AI can be used to identify fakes or altered images, thereby enhancing the credibility of the information. Blockchain technology creates tamper-proof digital content records, making it harder to misrepresent information afterwards. By leveraging blockchain, the integrity of information can be ensured, as any alteration will be immediately visible in the blockchain record.

For OSINT to remain a force for good, the response must be holistic—integrating technology, education, and an ethical framework. The OSINT community must come together to set standards that ensure White OSINT continues to operate in the light[12].

Conclusion

This article has demonstrated that OSINT is a double-edged sword, capable of spreading disinformation or verifying truth. The unethical use of OSINT, or Black OSINT, can destabilise institutions and fuel public crises. Conversely, White OSINT offers an invaluable tool for fact-checking, investigative journalism, and combating misinformation.

The distinction between these two is not always clear-cut. The techniques that expose falsehoods can also be twisted to deceive. This duality underscores the critical need for a robust ethical framework and the standardisation of OSINT methodologies to ensure the responsible use of OSINT.

• Critical areas for development include.

• Standardising OSINT methodologies for evidence collection and verification.

• Improving public media literacy to identify disinformation better.

• Leveraging technological innovations like AI and blockchain to ensure the integrity of information.

• Encouraging interdisciplinary collaboration to combat the growing complexity of disinformation.

• Establishing clear ethical guidelines to ensure accuracy, transparency, and responsible reporting.

By addressing these challenges, the OSINT community can help foster a more informed society and counter the rising tide of disinformation. Further research is needed to understand the long-term effects of OSINT on public trust and to improve communication strategies for verified information.

Disinformation is a topic that we will likely hear more of as the 2024 US Election approaches and conflicts in the Middle East and Ukraine continue escalating. The importance of a trusted, respected and credible White OSINT community may have never been greater.

Authored by: The Coalition of Cyber Investigators

Paul Wright (United Kingdom) & Neal Ysart (Philippines)

© 2024 The Coalition of Cyber Investigators. All rights reserved.

The Coalition of Cyber Investigators is a collaboration between

Paul Wright (United Kingdom) - Experienced Cybercrime, Intelligence (OSINT & HUMINT) and Digital Forensics Investigator; and

Neal Ysart (Philippines) - Elite Investigator & Strategic Risk Advisor, Ex-Big 4 Forensic Leader.

With over 80 years of combined hands-on experience, Paul and Neal remain actively engaged in their field.

They established the Coalition to provide a platform to collaborate and share their experience and analysis of topical issues in the converging domains of investigations, digital forensics and OSINT. Recognizing that this convergence has created grey areas around critical topics, including the admissibility of evidence, process integrity, ethics, contextual analysis and validation, the coalition is Paul and Neal’s way of contributing to a discussion that is essential if the unresolved issues around OSINT derived evidence are to be addressed effectively. Please feel free to share this article and contribute your views.

[1] The Coalition of Cyber Investigators. (2024). Black OSINT vs. White OSINT: The Role of Open Source Intelligence in Disinformation and Truth-Seeking. In The Coalition of Cyber Investigators Series. This article discusses how the unethical application of OSINT (Black OSINT) contributes to disinformation campaigns and how responsible, ethical OSINT (White OSINT) serves as a counterbalance by verifying facts and uncovering the truth.

[2] The Coalition of Cyber Investigators. (2024). The Strategic Misuse of OSINT in Disinformation Campaigns. In The Coalition of Cyber Investigators Series. This article explains how Black OSINT practitioners manipulate public information, taking facts out of context to shape misleading narratives. Such tactics can destabilize societies, sow discord, and damage reputations, as disinformation becomes a tool for influencing public opinion and decision-makers.

[3] Mueller, R. S. (2019). Report On The Investigation Into Russian Interference In The 2016 Presidential Election. U.S. Department of Justice https://www.justice.gov/archives/sco/file/1373816/dl (Accessed October 04, 2024)

[4] Shanapinda, S. (2020, April 9). 5G is not linked to the coronavirus pandemic in any way. Here’s the science. livescience.com. https://www.livescience.com/5g-coronavirus-conspiracy-theory-debunked.html( Accessed October 04, 2024)

[5] World Health Organization: WHO. (2020, December 22). Infodemic. https://www.who.int/health-topics/infodemic#tab=tab_1 (Accessed October 04, 2024)

[6] World Health Organization. (2022). WHO Policy Brief: COVID-19 Infodemic Management, 14 September 2022. https://iris.who.int/bitstream/handle/10665/362668/WHO-2019-nCoV-Policy-Brief-Infodemic-2022.1-eng.pdf?sequence=1 (Accessed October 04, 2024)

[7] Team, B. I. (2020, October 12). Identifying the Separatists Linked to the Downing of MH17 - bellingcat. Bellingcat. https://www.bellingcat.com/news/uk-and-europe/2019/06/19/identifying-the-separatists-linked-to-the-downing-of-mh17/ (Accessed October 04, 2024)

[8] Poynter. (2021). The CoronaVirusFacts Alliance database. https://www.poynter.org/coronavirusfactsalliance/ (Accessed October 04, 2024)

[9] Park, S. et al. (2021) Harvard Kennedy School, Misinformation Review. The Presence of Unexpected Biases in Online Fact-Checking. https://misinforeview.hks.harvard.edu/article/the-presence-of-unexpected-biases-in-online-fact-checking/ (Accessed October 04, 2024)

[10] The Coalition of Cyber Investigators. (2024). The Responsibility of OSINT: Ensuring Ethical Practices in Open Source Intelligence. In The Coalition of Cyber Investigators Series. This article discusses the critical role of OSINT practitioners in maintaining the integrity of information. It emphasizes the need for evidence-based practices and an ethical framework that includes transparency, accuracy, and respect for privacy, ensuring that White OSINT is used for the public good and not driven by any particular agenda.

[11] Mackintosh, E. (2019). Finland is winning the war on fake news. What it's learned may be crucial to Western democracy. CNN. https://edition.cnn.com/interactive/2019/05/europe/finland-fake-news-intl/ (Accessed October 04, 2024)

[12] The Coalition of Cyber Investigators. (2024). Integrating Blockchain and Ethical Standards in OSINT. In The Coalition of Cyber Investigators Series. This article highlights the role of blockchain in maintaining information integrity by ensuring that any alteration is immediately visible. It also stresses the importance of a holistic approach for OSINT practitioners, combining technology, education, and ethical guidelines to maintain White OSINT's positive impact on society.