Mathieu Gaucheler
@shibasec.bsky.social
OSINT and cybersecurity. SME at Maltego.
Maltego machines / custom Transform / Talks in my GitHub: github.com/shibaOSINT/MaltegoMachines
Medium: medium.com/@shibaosint
Maltego machines / custom Transform / Talks in my GitHub: github.com/shibaOSINT/MaltegoMachines
Medium: medium.com/@shibaosint
Pinned
The 27th of March, the Telegram channel White Uncles in Africa shared the following video of containers moving through Bamako. Let's take a look at what we can gather 🧵⬇️
Participants explored challenges with topics ranging from terrorist group, online casinos, WHOIS registries, PMCs operating in Africa to a Russian shadow fleet tanker. I had the pleasure to design the challenges along with the CIRAT team from @mercyhurst.bsky.social.
February 10, 2026 at 1:28 PM
Participants explored challenges with topics ranging from terrorist group, online casinos, WHOIS registries, PMCs operating in Africa to a Russian shadow fleet tanker. I had the pleasure to design the challenges along with the CIRAT team from @mercyhurst.bsky.social.
Maltego community CTF happened last Saturday, it was a wild 4h ride. If you missed it do not worry: we are leaving the platform open until February 17! Go to maltego.ctfd.io and give it a shot. There is something for everyone, regardless of your experience level. No paid tools needed.
February 10, 2026 at 1:28 PM
Maltego community CTF happened last Saturday, it was a wild 4h ride. If you missed it do not worry: we are leaving the platform open until February 17! Go to maltego.ctfd.io and give it a shot. There is something for everyone, regardless of your experience level. No paid tools needed.
Discord server: t.co/RlPnm8idEx
https://discord.gg/uN2WgtRR
t.co
February 6, 2026 at 1:18 PM
Discord server: t.co/RlPnm8idEx
Maltego is organizing an OSINT CTF. It will run tomorrow from 15:00 to 19:00 CET. Every level is welcome, no paid tools needed. Feel free to drop in and test the waters or to compete seriously and try to win a prize. Registration here: maltego.ctfd.io. You can also go to our Discord to find a team ⬇️
Maltego Community OSINT CTF
maltego.ctfd.io
February 6, 2026 at 1:18 PM
Maltego is organizing an OSINT CTF. It will run tomorrow from 15:00 to 19:00 CET. Every level is welcome, no paid tools needed. Feel free to drop in and test the waters or to compete seriously and try to win a prize. Registration here: maltego.ctfd.io. You can also go to our Discord to find a team ⬇️
Ever wanted to explore the @icij.org Offshore Leaks Database in Maltego? You can now do so with this local integration.
➡️https://github.com/shibaOSINT/Offshore-Leaks-Database-Maltego-Integration⬅️
➡️https://github.com/shibaOSINT/Offshore-Leaks-Database-Maltego-Integration⬅️
October 24, 2025 at 12:08 PM
Ever wanted to explore the @icij.org Offshore Leaks Database in Maltego? You can now do so with this local integration.
➡️https://github.com/shibaOSINT/Offshore-Leaks-Database-Maltego-Integration⬅️
➡️https://github.com/shibaOSINT/Offshore-Leaks-Database-Maltego-Integration⬅️
Both the school and the temple are in the same region, 40 km apart. Let's begin by exploring the road linking them on Google Street View: road number 2006. After a few minute we find the challenge's location: 13.9159829,101.8389441 (5/5)
October 21, 2025 at 6:17 PM
Both the school and the temple are in the same region, 40 km apart. Let's begin by exploring the road linking them on Google Street View: road number 2006. After a few minute we find the challenge's location: 13.9159829,101.8389441 (5/5)
The third sign will require a bit more work, OCR does not give us anything useful but both phone numbers give us a result for a web search: a school and a cattery. The cattery does not have an address listed on its page and has not posted since 2016, let's discard it. (4/5)
October 21, 2025 at 6:17 PM
The third sign will require a bit more work, OCR does not give us anything useful but both phone numbers give us a result for a web search: a school and a cattery. The cattery does not have an address listed on its page and has not posted since 2016, let's discard it. (4/5)
The first sign gives us"วัดโคกขี้เหล็ก" which after a quick web search leads us to a Buddhist Temple in Thailand (3/5)
October 21, 2025 at 6:17 PM
The first sign gives us"วัดโคกขี้เหล็ก" which after a quick web search leads us to a Buddhist Temple in Thailand (3/5)
First thing that we notice is the numerous signs in Thai script. After passing them through OCR and Google Translate we discover some useful information (2/5)
October 21, 2025 at 6:17 PM
First thing that we notice is the numerous signs in Thai script. After passing them through OCR and Google Translate we discover some useful information (2/5)
A short thread about an interesting geolocation challenge from Hack.lu CTF by @fluxfingers.net 🧵⬇️(1/5) #geolocation #geoguessr #OSINT
October 21, 2025 at 6:17 PM
A short thread about an interesting geolocation challenge from Hack.lu CTF by @fluxfingers.net 🧵⬇️(1/5) #geolocation #geoguessr #OSINT
Reposted by Mathieu Gaucheler
#BurkinaFaso
Geolocations of the JNIM attack on Tanwalbougou (12.0554, 0.7805) by @chrisadayton.bsky.social & @ influhunter (on X)
Geolocations of the JNIM attack on Tanwalbougou (12.0554, 0.7805) by @chrisadayton.bsky.social & @ influhunter (on X)
August 19, 2025 at 9:42 AM
#BurkinaFaso
Geolocations of the JNIM attack on Tanwalbougou (12.0554, 0.7805) by @chrisadayton.bsky.social & @ influhunter (on X)
Geolocations of the JNIM attack on Tanwalbougou (12.0554, 0.7805) by @chrisadayton.bsky.social & @ influhunter (on X)
Reposted by Mathieu Gaucheler
14.06 #Mali
According to a government communique, while returning from a mission yesterday (presumably taking part in the airstrike against FLA fighters near Aguelhok) the Su-24 was forced to ditch in the Niger river near Gao due to "adverse atmospheric conditions"
According to a government communique, while returning from a mission yesterday (presumably taking part in the airstrike against FLA fighters near Aguelhok) the Su-24 was forced to ditch in the Niger river near Gao due to "adverse atmospheric conditions"
June 14, 2025 at 8:40 AM
14.06 #Mali
According to a government communique, while returning from a mission yesterday (presumably taking part in the airstrike against FLA fighters near Aguelhok) the Su-24 was forced to ditch in the Niger river near Gao due to "adverse atmospheric conditions"
According to a government communique, while returning from a mission yesterday (presumably taking part in the airstrike against FLA fighters near Aguelhok) the Su-24 was forced to ditch in the Niger river near Gao due to "adverse atmospheric conditions"
Reposted by Mathieu Gaucheler
Cool open-source investigative tool I just learned about: alltext.nyc. It lets you search any text found in Google Street View images from 2007 to 2024— graffiti, shop signs, street text, you name it. Just type in what you see, and see what pops up.
May 8, 2025 at 4:33 PM
Cool open-source investigative tool I just learned about: alltext.nyc. It lets you search any text found in Google Street View images from 2007 to 2024— graffiti, shop signs, street text, you name it. Just type in what you see, and see what pops up.
Reposted by Mathieu Gaucheler
ICYMI: on Twitter, an OSINTer ('Vleckie') is being blamed for a US airstrike in Yemen that killed 8 civilians.
in a thread, she'd marked a group of houses as an underground bunker — from satellite imagery alone. those houses (not a bunker) were subject to a US airstrike. 8 innocent people dead.
in a thread, she'd marked a group of houses as an underground bunker — from satellite imagery alone. those houses (not a bunker) were subject to a US airstrike. 8 innocent people dead.
April 30, 2025 at 2:41 PM
ICYMI: on Twitter, an OSINTer ('Vleckie') is being blamed for a US airstrike in Yemen that killed 8 civilians.
in a thread, she'd marked a group of houses as an underground bunker — from satellite imagery alone. those houses (not a bunker) were subject to a US airstrike. 8 innocent people dead.
in a thread, she'd marked a group of houses as an underground bunker — from satellite imagery alone. those houses (not a bunker) were subject to a US airstrike. 8 innocent people dead.
"These are the first two fighter jets in history to be downed by an uncrewed surface drone, but they are unlikely to be the last."
***EXCLUSIVE***
Naval News has first image of Ukraine’s Sidewinder-armed Magura V7 surface drone (USV) which shot down two Russian Su-30 FLANKER jets
www.navalnews.com/naval-news/2...
Naval News has first image of Ukraine’s Sidewinder-armed Magura V7 surface drone (USV) which shot down two Russian Su-30 FLANKER jets
www.navalnews.com/naval-news/2...
First Image Of Ukraine's Sidewinder-Armed Magura V7 Surface Drone - Naval News
Ukraine has successfully shot down two Russian jets sent to interdict their surface drones in the Black Sea. We can reveal the previously unreported surface drone (USV) which scored the kills using Am...
www.navalnews.com
May 4, 2025 at 5:28 PM
"These are the first two fighter jets in history to be downed by an uncrewed surface drone, but they are unlikely to be the last."
As a bonus, we can also search for the picture of the rainbow flag they used: searching "гей-флаг" on Yandex yields the exact same flag withing the first page of results.
April 22, 2025 at 6:11 PM
As a bonus, we can also search for the picture of the rainbow flag they used: searching "гей-флаг" on Yandex yields the exact same flag withing the first page of results.
By doing a reverse image search on the content of the Facebook post, we find this picture, showing which flag the people in our original photo are really holding. Several videos of the event have also been posted, not a single rainbow flag in sight.
April 22, 2025 at 6:11 PM
By doing a reverse image search on the content of the Facebook post, we find this picture, showing which flag the people in our original photo are really holding. Several videos of the event have also been posted, not a single rainbow flag in sight.
Searching the picture on Google Lens leads us to a Facebook post mentioning a demonstration in Tinzaouaten (Mali). It doesn't contain the original picture, but there is a similar one with some of the same people. An FLA (Azawad Liberation Front) flag can also be seen: cyan, yellow, red and white.
April 22, 2025 at 6:11 PM
Searching the picture on Google Lens leads us to a Facebook post mentioning a demonstration in Tinzaouaten (Mali). It doesn't contain the original picture, but there is a similar one with some of the same people. An FLA (Azawad Liberation Front) flag can also be seen: cyan, yellow, red and white.
Whenever you suspect that an image might have been altered, Error Level Analysis (ELA) can reveal areas likely to have been modified. For more information on how to use ELA, check out this Bellingcat article from @annique.bsky.social
www.bellingcat.com/resources/20...
www.bellingcat.com/resources/20...
April 22, 2025 at 6:11 PM
Whenever you suspect that an image might have been altered, Error Level Analysis (ELA) can reveal areas likely to have been modified. For more information on how to use ELA, check out this Bellingcat article from @annique.bsky.social
www.bellingcat.com/resources/20...
www.bellingcat.com/resources/20...
🇲🇱🇷🇺 A Wagner affiliated Telegram channel posted this awkward photoshop yesterday, saying the people in the picture support LGBT rights, identifying them as "Azawad shepherds". Let's take this as an occasion to learn how to find the context of a doctored picture and prove the trickery 🧵⬇️ #Wagner #Mali
April 22, 2025 at 6:11 PM
🇲🇱🇷🇺 A Wagner affiliated Telegram channel posted this awkward photoshop yesterday, saying the people in the picture support LGBT rights, identifying them as "Azawad shepherds". Let's take this as an occasion to learn how to find the context of a doctored picture and prove the trickery 🧵⬇️ #Wagner #Mali
Reposted by Mathieu Gaucheler
In this upcoming GIJN webinar, we’ll explore how investigative journalists can document human rights abuses in war zones, with a focus on methods to ensure the info gathered can later be used by legal investigators or international courts.
Register now: https://twp.ai/9PQx3o
Register now: https://twp.ai/9PQx3o
gijn.org
GIJN Webinar: Gathering Evidence and Documents in Conflict and War Zones — A MENA Case Study
twp.ai
April 22, 2025 at 11:31 AM
In this upcoming GIJN webinar, we’ll explore how investigative journalists can document human rights abuses in war zones, with a focus on methods to ensure the info gathered can later be used by legal investigators or international courts.
Register now: https://twp.ai/9PQx3o
Register now: https://twp.ai/9PQx3o
Reposted by Mathieu Gaucheler
📢 The Internet Archive needs your help.
At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine.
Tell the labels to drop the 78s lawsuit.
👉 Sign our open letter: www.change.org/p/defend-the...
🧵⬇️
At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine.
Tell the labels to drop the 78s lawsuit.
👉 Sign our open letter: www.change.org/p/defend-the...
🧵⬇️
April 17, 2025 at 4:51 PM
📢 The Internet Archive needs your help.
At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine.
Tell the labels to drop the 78s lawsuit.
👉 Sign our open letter: www.change.org/p/defend-the...
🧵⬇️
At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine.
Tell the labels to drop the 78s lawsuit.
👉 Sign our open letter: www.change.org/p/defend-the...
🧵⬇️
Reposted by Mathieu Gaucheler
BREAKING.
From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
April 15, 2025 at 5:23 PM
BREAKING.
From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
New blogpost about a military convoy (100+ containers) in #Mali.
#OSINT #Geolocation #FAMAs #AfricaCorps #WagnerPMC
#OSINT #Geolocation #FAMAs #AfricaCorps #WagnerPMC
Looking at an arms convoy in Mali
Thanks to social media, it is increasingly easy to find footage of military activity. Before the 2022 invasion of Ukraine, several OSINTers…
medium.com
April 7, 2025 at 10:31 AM
New blogpost about a military convoy (100+ containers) in #Mali.
#OSINT #Geolocation #FAMAs #AfricaCorps #WagnerPMC
#OSINT #Geolocation #FAMAs #AfricaCorps #WagnerPMC