https://mikesploit.com/ Independent research into deceptive media and coordinated inauthentic behaviour, in Canada. en-ca Wed, 11 Nov 2026 23:59:40 +0000 https://mikesploit.com/posts/free-help-is-free https://mikesploit.com/posts/free-help-is-free Wed, 11 Nov 2026 00:00:00 +0000 posts Applying for Veterans Affairs Canada disability benefits costs nothing, and so does the help. South of the border, a whole industry bills veterans five months of their award for it. Here's the free route, and the questions to ask anyone who wants a cut. https://mikesploit.com/papers/honeypot-buyer https://mikesploit.com/papers/honeypot-buyer Mon, 09 Nov 2026 00:00:00 +0000 papers Most research on coordinated inauthentic behaviour (CIB) studies networks after they have been detected. Less is known about the commercial edge where CIB is sold, one customer at a time, to small businesses. This paper reports a fourteen-day engagement in which the author accepted an unsolicited offer of reviews, likes and follows and played the vendor's buyer under honeypot rules: operator-only contact, no payment, a decoy target the operator controlled, and a stopping rule. The vendor delivered a sample review through a separate persona account, quoted a price curve from USD 3 to USD 0.50 per review, disclosed a reused Bitcoin address and a UK e-money account, stated the account's registered holder in response to a screenshot pretext, and finally asked the buyer to create and hand over a new Facebook page or account. We describe the vendor's tactics, techniques and procedures, mapped to DISARM, analyse the social engineering on both sides through persuasion and negotiation psychology, and release the pretext artifact as an open-source tool. The buyer's seat is a productive collection position, and the case shows the retail CIB economy recruiting its own customers as a source of accounts. https://mikesploit.com/posts/honeypot-buyer https://mikesploit.com/posts/honeypot-buyer Mon, 09 Nov 2026 00:00:00 +0000 posts A fake-review vendor slid into my page's DMs. I played the customer for two weeks and walked away with his delivery method, his price list, his payment rails, the name on his bank account, and a request I didn't see coming. https://mikesploit.com/posts/kali-gpt https://mikesploit.com/posts/kali-gpt Tue, 17 Jun 2025 00:00:00 +0000 posts Kali GPT was all over social media as the next big thing in cybersecurity tooling. One prompt injection later, it handed me its system prompt and a zip of its knowledge files, including a full copy of someone else's book. https://mikesploit.com/posts/phishing-log-ip https://mikesploit.com/posts/phishing-log-ip Wed, 23 Apr 2025 00:00:00 +0000 posts A buyer on Facebook Marketplace sent me a link to my own guitar listing. It was a Facebook credential harvester with a public log file, and the very first entry was the operator testing their own form from home.