Issue 027 min read13 items
Delivery and verification
Delivery and verification, from about 6 to 26 October 2026: ad-delivered mercenary spyware, satellite evidence, passive collection tools, and the November conferences.
Editor’s noteNico Dekens
AdFection is the story I would put in front of a team this week. Citizen Lab’s report says a targeted ad, once it renders, was enough to deliver zero-click mercenary spyware, including Candiru on Al Jazeera devices. The delivery channel is the ad stack. The other half of this issue is verification. Bellingcat’s model test is strong on the first cut of a geolocation and weak where the job ends. I wrote that up under Featured analysis. The November conferences are sorted by date, with a calendar file on each row.
Featured analysis
The model can narrow the map. You still finish the job.
Bellingcat has been timing language models on geolocation since June 2025. The October round is the one to read, because the test finally looks like the work.
Each model received 52 photographs that had not been published anywhere online. The frames came from Bellingcat staff and the volunteer community. Metadata was stripped. There were no significant landmarks, and the set included snow, fog, and night. The prompt asked for one coordinate pair, the photographer’s position. No list of guesses, and no confidence score to hide behind. Models could use the provider’s own tools: search, code execution, and page fetch. Output was capped at 64,000 tokens, on the default effort setting, with 15 minutes per photo. One rescue prompt was allowed if the first answer came back without coordinates.
That is a harder test than a Street View game. It is also the right comparison for a live case.
The current models are better at the first move. Bellingcat reports that the strongest of them placed more than half of the 52 photos within 25 kilometres, and that several models put at least 10 of the 52 inside one kilometre. Claude’s Opus and Fable sat at the top of the table on either score. Gemini 4 Argon led the Mean Log Score, the metric built so the last few kilometres count. A GeoGuessr-style score treats 500 metres and 5 kilometres as nearly the same result. On a real job those two answers are different buildings.
The last stretch is where a geolocation is actually made: matching features and checking perspective, often on a bad frame, often against a second source. Bellingcat’s write-up says none of the models was foolproof, and that a model can state a wrong position with confidence. In a military or intelligence setting, that miss carries a different cost than a hobby map. Bellingcat also notes that Anthropic’s public comparison used GeoGuessr and images that were already online, including Street View: daytime, navigable, and absent from large parts of the world. Anthropic’s own caveat, as Bellingcat reports it, is that this does not clearly match the job of pinning a location in near real time in a less populated battlefield. Bellingcat’s set was unpublished on purpose, so a strong score is harder to explain as a photo the model had already seen.
Bellingcat also tried a supercharged agent on Claude Opus: extra instructions, satellite tiles, and a lookup against their OpenStreetMap search. On a photograph at the Global Campus of Human Rights in Venice, 11 of 17 off-the-shelf models landed within 5 kilometres. The customised agent, and GeoSleuth, were the ones that named the camera position. The same write-up says those runs are not a straight comparison with the off-the-shelf table, because the timeout and the toolset were different, and that the boosted models still got locations wrong.
Let the model throw away the wrong continent and the wrong city. Then do the last check yourself, on imagery you can defend, with a method you can explain. If the pin is unverified, it is a suggestion, and a suggestion is where the work starts.
The score table and the method notes are in Bellingcat’s piece, Can LLMs supercharge geolocations?.
01News
Reporting and public developments from the last two weeks.
Pegasus against Serbian pro-democracy figures
Citizen Lab, with the SHARE Foundation, reports with high confidence that Vladan Đokić, rector of the University of Belgrade, was infected in 2026 with NSO Group's Pegasus in a zero-click attack. Prosecutor Rade Bajić received an Apple threat notification on 13 August, which the lab treats as a high-confidence sign of mercenary-spyware targeting. The note brings the public count of Serbian civil-society cases to at least 16.
Why it matters
A university rector and a prosecutor are now in the public record, and the Serbian civil-society count is at least 16.
Exposing AdFection
Citizen Lab reports the first public confirmation of zero-click mercenary spyware delivered when a targeted advertisement renders, a technique it calls AdFection. Discover-Tech placed those ads, and devices at Al Jazeera were infected with spyware from Candiru, rebranded as Integrity Labs. Google and IAB Europe removed Discover-Tech from their advertising vendor lists in early October 2026.
Why it matters
A rendered ad was enough to deliver zero-click spyware, so the advertising stack itself is an exposure path.
Satellite images of tree felling at East Potomac Golf Links
Bellingcat compares Planet Labs imagery of East Potomac Golf Links in Washington, DC, from 8 and 13 October. The later scene shows large cleared sections after reports that 430 trees were cut down over the weekend of 10 October. That felling prompted an emergency court hearing on 12 October, which barred further changes until later in the month.
Why it matters
The 8 October and 13 October scenes show the cleared ground after the weekend felling.
02Tools
Software, data, and utilities that earned a closer look.
MISP modules v3.1.1
misp-modules 3.1.1, released alongside the MISP 3.0 early access, adds 33 expansion modules. New pivots include Team Cymru Scout, Shodan InternetDB, Zetalytics passive DNS, and the Wayback Machine, along with sandbox, malware, and vulnerability lookups. The release also adds firewall ACL exporters and a round of fixes to existing connectors.
Why it matters
Thirty-three new expansion modules are new pivots. The release matters for what those connectors can reach.
OpenOSINT v2.33–v2.36
Releases from 10 to 19 October, v2.33 through v2.36, make passive collection the default, add a --public-only network guard, and make exposure checks configurable. v2.33 also caps how many tool calls a run may make. v2.36 lets a caller choose which exposure checks to run.
Why it matters
Passive collection is now the default, and a public-only guard limits how far a run can reach.
Trace Labs OSINT VM 2026.10
The 2026.10 OSINT VM adds a dedicated apt repository and a tlosint-meta package, so most of the toolkit can be installed and updated through apt. The same release adds 18 SOCMINT tools and a Debian QubesOS template with the tools preinstalled. New tools are expected to build for arm64 and amd64, follow vendor terms of service, and be actively maintained.
Why it matters
An apt repository and a Qubes template make the 2026.10 VM easier to install and keep current.
03Tradecraft
Methods, workflows, and notes on how the work is done.
10 top OSINT data sources and how to use them
A categorized guide to ten OSINT source types, published by ShadowDragon and written by Nico Dekens, covering social media, public records, corporate registries, domain and certificate data, imagery, breach sets, news archives, forums, and dark-web sources. It treats a finding as a lead until a second independent source agrees. Read it as a map of sources; the page is also a vendor resource.
Why it matters
Use it as a map of source types. A finding stays a lead until a second independent source agrees.
Can LLMs supercharge geolocations?
Bellingcat tested about ten models on 52 photos that had not been published online, and asked each for a single set of coordinates. Newer models narrowed the search much faster, and the strongest placed more than half the photos within 25 kilometres, but none was reliable for an exact point. The testers keep a person in the loop for that last check.
Why it matters
The strongest models placed more than half of 52 unpublished photos within 25 kilometres. None was reliable for an exact point.
04Events
Conferences, training, and meetups, soonest first.
| Date | Event | Where | Format | Price | Calendar |
|---|---|---|---|---|---|
| 4–6 Nov 2026 | Osintomático 2026pretix.euIssue 02 | Alcalá de Henares | €35 | Add to calendar | |
| 9–14 Nov 2026 | SANS Amsterdam November 2026sans.orgIssue 02 | Amsterdam | — | Add to calendar | |
| 16–20 Nov 2026 | Bellingcat Deep Dive, Torontobellingcat.comIssue 02 | Toronto | €3,200 | Add to calendar | |
| 19 Nov 2026 | PFIC Fall Summitpfic-conference.com09:00–13:00 ETIssue 02 | Online | Free | Add to calendar |
05More
Reading and items that still belong in the briefing.
OSINT Live 2026 recap
Skopenow's recap of OSINT Live, held on 15 October, covers sessions on teams of specialized AI agents and on synthetic-identity fraud. The same post announces a public beta of X-Ray, which checks media for signs of AI generation or manipulation using detection, metadata, and content credentials. X-Ray is not yet sold inside the Skopenow platform.
Why it matters
The recap is the public note on X-Ray’s beta. X-Ray is not yet sold inside the Skopenow platform.