General Social Media Information Archives

TikTok Intelligence & Research

Tik Tok has become the new “hot” social media platform with a huge amount of scrutiny around it. China launched it in 2016 and it grew to the US and UK markets in 2018.

What is it and How Does it Work?

It started as a lip-synch video app but now has morphed into an app where users can upload all kinds of videos clips. In fact, to date, it has a billion downloads worldwide and over 500 million active users. It supports over 15 languages and users in at least 75 countries. That is a lot of growth in such a short amount of time.

In a previous blog, we explained how to use TikTok and the difference between accessing the app via mobile device vs. desktop.

TikTok Demographics

MarketingCharts TikTok data (March 2019) finds over 50% of TikTok users in the US are aged 18-34 – with a nearly even split between 18-24 year olds and 25-34 year olds. Interestingly though, we still find a quarter of US TikTok users are aged 45-64. Statista supports those numbers as seen in the chart below.

Social Intelligence

When it comes to intelligence or social listening, TikTok is still a puzzle to most. Enterprise social platforms are not able to harvest data from TikTok and there is no API. The platform itself encourages users to to keep their content public because that is the very best way for one to get “famous”. Ordinary people doing very unordinary things to gain attention of brands looking for the next social media influencer.

The best way for a user to search TikTok is through their discover feature. Search via hashtags (desktop only allows hashtag searching). Keyword searching is available, however it will mostly capture the text description of videos.

Currently, social media research in TikTok will be very time consuming. It can be useful in the case where a user is very active and has a good deal of followers. Very easy to blend in to those followers and monitor activity.

Employee Misconduct

Fox News Reported:

A Chick-fil-A employee claims she was fired from the restaurant after posting a now-viral TikTok video revealing menu hacks for cheaper food.

The story began in late July, when TikTokker @Anasteeezy shared a quick clip to the video-sharing platform discussing an ordering hack for seasonal drinks. In the time since, the video has been viewed over 2.5 million times.

“I work at Chick-fil-A so I’m here to give you all the tips and tricks on secret menus items, how to get things cheaper and just all that” she began. “And this is only a part one.”

The employee started by explaining that by ordering a large Arnold Palmer drink with four pumps of mango, you can allegedly replicate Chick-fil-A’s seasonal mango passion tea, only cheaper and in a larger cup.”

The Dark Side of TikTok

Like every other social media platform, there is a dark side. Scams are popping up all the time on the platform. For one, there are plenty of bots on the platform impersonating real users. These automated bots either direct you to shady websites to shell out your private information like phone numbers and bank information or infect your device with malware.

Wired Magazine recently published an article, “Does TikTok Really Pose a Risk to US National Security? In the summer of this year, Wells Fargo banned employees from using TikTok on company devices.

TikTok’s fiercest opponents argue that it should be viewed as a dangerous Trojan horse for Chinese Communist Party espionage.

OSINT Research & False Positives

A great deal of time must be spend on OSINT in order to weed out false positives – good intelligence vs bad intelligence. The degree of reliability and authenticity. The importance of an accurate starting point is critical when taking your research on a person of interest to the world wide web.

We will dive into this in more detail in the weeks to come. For now, let’s begin with how to identify a fake photo. Hiding your real identity has never been easier on the web and social media is the scammer’s friend when it comes to this. A photo may be a false positive because while it appears to be the person, in actuality, it is a fake.

Can You Tell the Difference?

Take a close look at the photos above. One is a real person and one is a computer generated photo. Which is which? Not so easy, right? This is something that all of us in the open source research, law enforcement and private investigations industries will need to be proficient at. A great site to test your skills is Which Face is Real?

You may wonder how this is even done. You are not alone! Machine learning has been used to customize and generate realistic photos. It is called StyleGAN.

StyleGAN was originally an open-source project by NVIDIA to create a generative model that could output high-resolution human faces. The basis of the model was established by a research paper published by Tero Karras, Samuli Laine, and Timo Aila, all researchers at NVIDIA.

(source: https://heartbeat.fritz.ai/)

What To Look For

According to Which Face is Real, look for the following things:

Teeth and Hair: Hair and teeth are very difficult to render realistically. Often teeth are odd or asymmetric. Look for a type of hallo over the hair or other odd imperfections.

Eye Glasses: Right now, it’s very hard for algorithms to generate realistic-looking eyeglasses. Take a close look at the style of the glasses. Many times one side will look different than the other side.

Background of the Image: Many times the background of an image is a give-away. Because the concentration is on the face alone, the background may show smudge marks or render unclear.

When in Doubt….

If you suspect your target is using a false identity, you can do your very own “fact checking”. Google image will allow you to upload an image to search the web for other images that look just like it.

One of our recent blog posts discussed this in further detail. Online Research: 3 Tips for Better Results. It is more important than ever to be sure you have the right tools in your tool box.

PS: If you guess the photo of the woman, you are correct! She is a real person.

Online Research: 3 Tips to For Better Results

Online investigation is a piece by piece process that we hope will bring us to the Aha moment! Sometimes it does and sometimes it doesn’t. In today’s research climate, online resources have become even more valuable to the Private Investigator or Online Researcher. One indication of this is the evolution of online data bases and web scrapping software companies who are able to offer us much more than years past. How well are you keeping up?

Time is Money- Money is Time

Deep Web — Photo credit: *Michael Lieberman*

The world wide web is huge and the image above provides a great visual of just that. When you begin your online search this is something to keep in mind. How much time are you willing to invest to gather the data you need? Many times two heads are better than one. We confer with other team members when conducting online research all the time and have found it to be very valuable. A fresh set of eyes can make a huge difference.

Multiple software platforms are better than one platform. Each platform captures data from different online data bases. Sometimes the most important data point is found by scrapping the web against every single piece of information you have available and know to be true. One thing can lead to another when it comes to online research and each data point you gather leads to another and so on. It is a good idea to get another prospective when you can, by either hiring a third party or trying out a new software/data base even if there is a small cost to it. Depending on the case, your strategy should include options whenever possible.

Discover the Right Apps

Recently, we wrote about the importance of Social Media Apps such as TikTok. Apple has over 2.8 million apps available currently. That is a whole lot of apps! We will zero in on a couple that you may find helpful. Check out new apps regularly for your online investigations.

Downloadgram: Downloader for Instagram: Photo & Video Saver allows the user to download videos and images from Instagram’s links. By copying image’s and video’s link and pasting into Downloader for Instagram which automatically downloads that video/image, then you can save into your device.
Photo Investigator: The Photo Investigator is an iOS app to view all image metadata (all the possible data stored ABOUT and within each photo). You can also remove photo metadata with an in-app purchase. The Investigator can also open the image’s GPS location in the maps app for directions; view images at full size and zoom them larger than in the Photos App.

Protecting Your Privacy

One of the very first things I recommend is to get a good VPN (Virtual Private Network). There are a lot of options. Take a look at Best VPNs of 2020 for a good list of options. We use NordVPN and have been very pleased. First and foremost it provides a strong degree of online anonymity. Additionally, when reviewing providers, make sure that you have the option to include mobile devices as well. This will keep you protected when you need to search using your mobile device on the road.

Another thing to keep in mind is when something online is “free” you are very likely giving them your private user information in some way. It is just the way the web works. Many data bases do offer free searches. You get a little taste of what the site offers but at a price.

This is why it is a good idea to use an email masking service. One that I would recommend you take a look at is 33mail.com . An excellent safeguard when having to supply an email address online. The site explains how it works below:

“Aliases are created automatically the first time an email is sent to them, so you can just make up an alias on the spot and use it when you sign up for a website, and it will be created the first time that website sends an email to it.“

As many are still working from home, protecting yourself online has never been more important.

Using Social Media Apps for Research

In the world of social media research for investigations, Apps are often times over looked. There is such a high priority given to Facebook, Instagram and Twitter, that often times people stop there.

Some social media apps are designed to be used by mobile phone only. Some allow both mobile and desktop login’s. Most of the time the desktop login’s are extremely cumbersome and not easy to navigate. When both are allowed, they often come with different permissions. No matter which you utilize, it is important to understand strategy and tactics for each.

The top Social Media Apps currently are TikTok, Snapchat, and Telegram. For the purpose of this blog post, we will take a quick , topical look at TikTok providing you with some very basic information on how to get started using the app.

TikTok

TikTok is one of the most popular social media apps. As of this writing, TikTok has over 500 million active users (last reported in 2018). Up to 60% of US TikTok users are aged between 16-24, according to a November 2019 release from Reuters. During the time of the Pandemic, with everyone isolated, an entirely new generation has started to use the app. I am sure those numbers have gone way up. We have been searching TikTok in our social media scans for our clients when the age of the suspects warrants it. Recently, we have found that may people in their 30’s are using the app.

You can download the app on your mobile phone and create a login in order to use the app. We would suggest signing up with one of your email addresses that you use for this purpose. Once in, hit “discover” and type in your suspect’s name or user name. Use it to search just like you would any other social media platform. Once the profile is found, you can view their followers and who they are following, but you can’t see their likes.

It is always advisable to use a sock puppet or alias as you would for any search. I would also advise removing the app once you have completed the search for added security. You can always upload it again and log in with your same credentials.

Visual steps to delete the app from your mobile phone

Desktop TikTok

You are able to access TikTok through your web browser at www.ticktok.com to conduct a small amount of searches. You will find that certain features/functions require you to have an account. Once you are all set up with your account, as described above, you can begin testing it out by conducting various searches.

When an investigation requires a deeper dive into a suspect’s TikTok, you will need advanced skills for that task. Installing an Emulator would be the next step in an OSINT search. From there you can conduct more precise keyword searches that align with your specific investigation.

It is so important to stay up to date with all social media sites. They are known to change the rules frequently. Be sure to check back often as we write frequently about social media changes.

LinkedIn is the New Facebook: Search Tips

LinkedIn is slowly (over the last few years) turning from a business only platform to more of a sharing platform. While some things are still tabu, more and more users are sharing posts around personal matters than ever before. In fact, LinkedIn just launched its own version of Facebook stories. This will change how you search in LinkedIn.

LinkedIn Stories

LinkedIn, has recently announced the launch of its Stories feature to allow users to share their photos and videos of up to 20 seconds on their accounts. The UAE was actually the first country in the Middle East to try the new feature out. LinkedIn explained that since the Pandemic, more users were using the platform and they noted an increase of 20% of private messaging on the platform. The engagement on posts has tripled. Currently LinkedIn has 4 million active users.

LinkedIn Loopholes for OSINT

Last month, I wrote a blog post, “LinkedIn Loopholes. How to Use Them in Your Search.” As I outlined in that post, LinkedIn got rid of their advanced search option making searching the platform much more difficult to do. It is worth another look however. Especially, due to the recent addition of LinkedIn stories. It remains to be seen just how this will work and what, if any, search options there will be here.

How Does This Help the Private Investigator?

One way is to take a look at the user’s URL. For example purposes, we will use my URL for my Linkedin profile. Anyone can find me by searching for Kathy Doering, however take a look at my URL. If you were investigating me, you may consider using this unique URL to search Google.

A solid LinkedIn profile can uncover all kinds of clues in terms of previous work experience. Some users allow their connections to be public vs. private. This is another plus for the investigator.

Don’t forget to take a look at their interests and who they follow. Groups they are involved with may be of interest as well. If more personalization is where LinkedIn is headed, it will be well worth it to devote some research time here.