Guides9 min
Threat Actor Attribution With OSINT: From Alias to Name, With Evidence Grades
A username match is not an attribution. Using aliases and email addresses already printed in sanctions entries, court filings and named reporting, this guide grades each kind of OSINT evidence on a six-rung ladder, from common-word collisions like "mango" (439 exact-match results) to email-anchored accounts and display names that reproduce a published identification. It also covers what never counts and how to verify a "hacker's email" before you pivot.