Let's see how we can help you!
Leave a message and our dedicated advisor will contact you.
Send us a message
0/10000
Live OSINT Lesson: How Journalists Tracked Down an Internet Troll
Published: 00:00 11/28/2025
Analizy
Sherlock Holmes of the Digital Age
We often think that under a pseudonym on the X platform (formerly Twitter), we are invisible. Nothing could be further from the truth. The editorial team at Wirtualna Polska has just published an investigation that serves as a textbook example of using Open Source Intelligence (OSINT) in investigative journalism.
The goal was to identify the person hiding behind the aggressive account "Morgenstern616". How was this done? It wasn't magic, but tedious data analysis.
Step 1: Big Data and AI (SOCMINT)
First came quantitative analysis. Journalists analyzed over 75,000 posts. This is a goldmine of information.
- Profiling: Artificial intelligence helped filter neutral posts from the sea of hate. In these posts, the user revealed details about their life—e.g., that they live in the Opole Voivodeship, have family near Namysłów, or worked at a municipal office.
- History Verification: The troll's claims (e.g., "I studied with politician X in 2011-2013") were compared with actual student lists and public figures' biographies. Everything matched.
Step 2: Geolocation (IMINT)
This is where the real detective work begins. The user made classic "OpSec" (Operational Security) errors by publishing photos from their surroundings.
- View from the Window: A photo showing the panorama of Opole allowed investigators to pinpoint the specific apartment block (so-called militia housing estate) where the perpetrator lived.
- Neighborly Tip-off (Unconscious): A photo of a flag hung by a neighbor supporting a different political option allowed tracking down a specific property near Namysłów.
- Infrastructure: A photograph of a destroyed election poster on a specific utility pole allowed narrowing down the search area to a small town.
Step 3: Technical Errors and the "Human Factor"
Even the most sophisticated techniques are unnecessary when the target exposes themselves.
- The Dog: A classic of the genre. The exact same photo of a mongrel appeared on the anonymous hater's account and on the private Facebook profile of Kamil Rudziński. Remember: Your pets are unique and easy to link!
- Browser Avatar: On one of the screenshots the troll bragged about (showing AI capabilities), a Google avatar thumbnail with the letters "KR" was visible. An identical avatar (same font and colors) was assigned to an email address in the public CEIDG (Central Registration and Information on Business) registry.
- Visual Metadata: The same memes and graphics, with identical parameters, were posted on both accounts.
Conclusions
The WP investigation shows that in the digital age, every scrap of information we leave online is a piece of a puzzle. A view of clouds from a window or a photo of a dog is enough to connect the dots. For cybersecurity and OSINT specialists, this is proof that the weakest link always remains the human and their desire to show off online.
See Also: Why VPN Is Not Enough - Comprehensive analysis of OPSEC techniques and identity compartmentalization that protect against the unmasking described in this article.
Source: Wirtualna Polska
See Also
- OSINT: A short guide to the art of Open Source Intelligence – See how to use the techniques described in this article step by step.
- Digital Fortress 2025: The Ultimate Privacy Guide – Learn how to protect your privacy so you don't become the target of a similar analysis.
Until next time, Aleksander
About the Author
Aleksander Zębrowski
Chief Technology Officer at SecurHub.pl
PhD candidate in neuroscience. Psychologist and IT expert specializing in cybersecurity.
Related Articles
Analizy
When AI Hits the Couch: What LLMs Really "Think" About Their Creators
Can artificial intelligence experience trauma? We explore the fascinating and disturbing results of an experiment where algorithms underwent therapy sessions. The result? Synthetic psychopathology.
10:42 19.12.2025
11 min
Analizy
What Are We Really Doing With AI? 5 Surprising Truths From 100 Trillion Token Analysis
An analysis of 100 trillion tokens debunks myths about artificial intelligence. It turns out that instead of office productivity, roleplay reigns supreme, and users bond with models like in the Cinderella fairy tale.
16:24 16.12.2025
13 min
Analizy
RAM worth its weight in gold: 5 hidden causes of the 2025 market storm
Upgrading a PC in 2025 is a financial nightmare. Why have RAM prices skyrocketed? It is not just AI. We uncover the physics of silicon, Samsung strategy, and the end of Windows 10.
19:50 15.12.2025
11 min
Comments
Loading comments...