--- title: "| platform abuse" description: platform abuse | --- - [Home](https://www.nisos.com/) - Solutions - [Manage Human Risk](https://nisos.com/solutions/human-risk/) - [Protect Online Platforms](https://www.nisos.com/solutions/trust-safety/) - [Manage Cybersecurity Risks](https://www.nisos.com/solutions/cybersecurity/) - [Protect Executives, Assets, and Reputation](https://www.nisos.com/solutions/corporate-security/) - [Secure the Employee Lifecycle](https://nisos.com/solutions/workforce-risk/) - Services - [Human Risk](https://nisos.com/services/human-risk/) - [Employment Shield](https://nisos.com/services/employment-shield/) - [Executive Shield](https://nisos.com/services/executive-shield/) - [Third-Party Intelligence Solutions](https://nisos.com/services/third-party-intelligence-solutions/) - [Insider Threat Intelligence Solutions](https://nisos.com/services/executive-shield/) - [Risk Assessment](https://www.nisos.com/services/risk-assessments/) - [Threat Landscape](https://www.nisos.com/services/threat-landscape-assessment/) - [Threat Monitoring](https://www.nisos.com/services/threat-monitoring/) - [OSINT Monitoring & Analysis](https://www.nisos.com/services/osint-monitoring-and-analysis/) - [Investigations](https://www.nisos.com/services/investigations/) - [Adversary Investigation](https://www.nisos.com/services/adversary-insights/) - Company - [About Us](https://nisos.com/company/about-us/) - [The Nisos Difference](https://nisos.com/company/the-nisos-difference/) - [Client Success](https://nisos.com/company/client-success/) - [Careers](https://www.nisos.com/company/about-the-company/careers/) - Resources - [News](https://www.nisos.com/newsroom/) - [Blog](https://www.nisos.com/nisos-blog/) - [Events](https://www.nisos.com/events/) - [Resource Library](https://www.nisos.com/resources/library/) - [Podcasts](https://www.nisos.com/podcasts/) - [Contact](https://www.nisos.com/contact/) [![Nisos-Logo-Blue](https://blog.nisos.com/hubfs/Nisos-Logo-Blue.png) ![Nisos-Logo-White](https://blog.nisos.com/hubfs/Nisos-Logo-White.png) ![Nisos-Logo-Blue](https://blog.nisos.com/hubfs/Nisos-Logo-Blue.png)](https://www.nisos.com/) - [Default HubSpot Blog](https://blog.nisos.com/blog) - [Home](https://www.nisos.com/) - Solutions - [Manage Human Risk](https://nisos.com/solutions/human-risk/) - [Protect Online Platforms](https://www.nisos.com/solutions/trust-safety/) - [Manage Cybersecurity Risks](https://www.nisos.com/solutions/cybersecurity/) - [Protect Executives, Assets, and Reputation](https://www.nisos.com/solutions/corporate-security/) - [Secure the Employee Lifecycle](https://nisos.com/solutions/workforce-risk/) - Services - [Human Risk](https://nisos.com/services/human-risk/) - [Employment Shield](https://nisos.com/services/employment-shield/) - [Executive Shield](https://nisos.com/services/executive-shield/) - [Third-Party Intelligence Solutions](https://nisos.com/services/third-party-intelligence-solutions/) - [Insider Threat Intelligence Solutions](https://nisos.com/services/executive-shield/) - [Risk Assessment](https://www.nisos.com/services/risk-assessments/) - [Threat Landscape](https://www.nisos.com/services/threat-landscape-assessment/) - [Threat Monitoring](https://www.nisos.com/services/threat-monitoring/) - [OSINT Monitoring & Analysis](https://www.nisos.com/services/osint-monitoring-and-analysis/) - [Investigations](https://www.nisos.com/services/investigations/) - [Adversary Investigation](https://www.nisos.com/services/adversary-insights/) - Company - [About Us](https://nisos.com/company/about-us/) - [The Nisos Difference](https://nisos.com/company/the-nisos-difference/) - [Client Success](https://nisos.com/company/client-success/) - [Careers](https://www.nisos.com/company/about-the-company/careers/) - Resources - [News](https://www.nisos.com/newsroom/) - [Blog](https://www.nisos.com/nisos-blog/) - [Events](https://www.nisos.com/events/) - [Resource Library](https://www.nisos.com/resources/library/) - [Podcasts](https://www.nisos.com/podcasts/) - [Contact](https://www.nisos.com/contact/) ### Solutions Managed Intelligence solutions are designed to address your needs in an evolving risk landscape. Empower your organization with methodologies and actionable results tailored to the innovative ways adversaries are targeting you. ### Mitigate Advanced Threat Actors Inform your security operations with greater context answering the “how” and “why” of the threat actors you face. ### Counter Disinformation Enable informed business responses with the “who” and “why” behind coordinated campaigns. ### Mitigate Insider Threats Improve your program’s ability to get to “who” and “what” with technical program building and investigations. ### Stop Platform Abuse Take action against nefarious use of your platforms with the “who” and “how” of threat actors targeting them. ### Cyber Diligence for Mergers and Acquisitions Facilitate a smooth transition with the “what” and “why” of the security risks to your acquisition. ### Third Party Risk Dilligence Increase the effectiveness of your security evaluations with specifics on the “where” and “what” of your third party risk profile. ### Services Access a world-class intelligence capability tailored to your specific needs. Control a multi-million dollar program without the time or expense and solve problems both lasting and acute. ### Managed Intelligence Ongoing risks, whether from one threat actor or many, require persistent focus. Leverage skills, data, and technology to harden your defenses. ### Security Investigations Gain the context needed to make informed decisions during periods of heightened risk. ### What is Managed Intelligence? ## Case Studies ###### 1 min read ## [Disrupting Nation-State Recruiting and Disinformation Efforts on Job Site Platform](https://blog.nisos.com/case-studies/disrupting-nation-state-recruiting) By [Nisos](https://blog.nisos.com/case-studies/author/nisos) on Dec 11, 2020, 9:00:00 AM [![](https://blog.nisos.com/hubfs/cs-tile-Disrupting%20Nation-State%20Recruiting%20and%20Disinformation%20Efforts%20on%20Job%20Site%20Platform-1.jpg)](https://blog.nisos.com/case-studies/disrupting-nation-state-recruiting) **The Challenge** A job recruiting platform approached Nisos to determine the severity and authenticity of an affiliate recruiting company that appeared to be involved with disinformation and foreign nation state espionage efforts. The foreign nation state was suspected of targeted recruiting of individuals in sensitive US government positions using sockpuppet accounts. **Why Nisos** After receiving an allegation that the affiliate was using their platform to advance these efforts, the client asked Nisos to perform a digital investigation and use high operational security tradecraft to determine the extent of the operation and make recommendations on how to address the issue. Options included: 1. Removing the recruiting company from the platform, 2. Continuing to monitor, and/or 3. Informing law enforcement. **Preparation** Nisos was provided with minimal information consisting only of the name of the recruiting company. Nisos was not provided with any data regarding the details of the client’s organization or internal telemetry. Topics: [Cybersecurity](https://blog.nisos.com/case-studies/topic/cybersecurity) [Case Study](https://blog.nisos.com/case-studies/topic/case-study) [platform abuse](https://blog.nisos.com/case-studies/topic/platform-abuse) [Continue Reading](https://blog.nisos.com/case-studies/disrupting-nation-state-recruiting) ###### 1 min read ## [Reducing Executive Risk by Removing Sensitive Personally Identifiable Information (PII) from the Internet](https://blog.nisos.com/case-studies/reducing-executive-risk) By [Nisos](https://blog.nisos.com/case-studies/author/nisos) on Dec 1, 2020, 4:28:57 PM [![](https://blog.nisos.com/hubfs/cs-tile-reducing%20executive%20risk.jpg)](https://blog.nisos.com/case-studies/reducing-executive-risk) **The Challenge** A technology company tasked Nisos to conduct a threat evaluation assessment on one of their executives after multiple internet forum users posted inflammatory, threatening, and racially derogatory content. More concerning, some forum users posted the executive’s residential address, social media accounts, public records information, speaking engagements and locations, and other sensitive personal information. **Why Nisos** The company approached Nisos to conduct a threat evaluation and digital identity reduction (PII removal). Prior to engaging Nisos, they had approached other vendors who could conduct a threat evaluation but had no ability to action and remove the problematic PII data. **Preparation** Nisos used a variety of available external data sources that did not require access to internal company information. Topics: [Cybersecurity](https://blog.nisos.com/case-studies/topic/cybersecurity) [Case Study](https://blog.nisos.com/case-studies/topic/case-study) [platform abuse](https://blog.nisos.com/case-studies/topic/platform-abuse) [Continue Reading](https://blog.nisos.com/case-studies/reducing-executive-risk) ###### 2 min read ## [Identifying and Disrupting Platform Abuse in the Gig-Economy](https://blog.nisos.com/case-studies/identifying-and-disrupting-platform-abuse-in-the-gig-economy) By [Nisos](https://blog.nisos.com/case-studies/author/nisos) on Nov 17, 2020, 4:43:14 PM [![](https://blog.nisos.com/hubfs/cs-tile-Identifying%20and%20Disrupting%20Platform%20Abuse%20in%20the%20Gig-Economy.jpg)](https://blog.nisos.com/case-studies/identifying-and-disrupting-platform-abuse-in-the-gig-economy) **The Challenge** A technology company noticed a disturbing increase in malicious activity across their platform. Unknown individuals were selling bots that claimed to automate interactions with their platform and provide those that purchased the app an advantage over other users. This use of the app was a clear violation of the client’s Terms of Service. In other words - the bots would “game the system” to the financial disadvantage of normal conforming users - leading to frustration and anger directed at the client. To make matters worse, the bots mirrored the legitimate client application, presenting additional security threats. The client enlisted Nisos with three primary objectives: 1. Determine how the bots were able to subvert client controls and take advantage of the platform. 2. Provide recommendations on how the client could improve their security posture and counter the illegitimate activity of the bots. 3. Identify the actors making the bots, enabling the client to properly attribute the crime and take legal action. **Why Nisos** Nisos’ ability to help the client was rooted in our ability to deliver high-quality technical application analysis combined with open source research and attribution. **Preparation** The Client started by providing Nisos with a detailed history of bots that they had previously uncovered. They requested Nisos identify additional bots that may be present and undiscovered. In order to accomplish this task, Nisos did not need to access the Client’s network or sensitive data. **Execution** Nisos acquired the bot of most concern to the client through a common App store. We confirmed that it operated as claimed and provided an analysis of how the bot functioned at the code level. We also determined that several methods could be used to create a functional bot targeting the client’s platform, and we provided recommendations to the client to remediate this risk. Our assessment concluded that the creator of the bot took the official client application, acquired the binary from a device, and altered it with their own additional code. This additional code pulled the necessary information from the client and automated user responses. **Attribution** Nisos found that previous application bot domains were associated with truncated email addresses. In one case, Google cache inspection of application .vip revealed a telegram account associated with a partially named online persona. We acquired a license for the application and extracted the Intelligent Process Automation (IPA). We then identified that the back end server for downloading the app bot was associated with an IP address that served as a Virtual Private Server (VPS). The infrastructure was hosted in a Japanese hosting facility. In another case, we were able to track back “old” versions of the application bots that revealed selectors. Using these selectors and cross referencing them in Nisos proprietary credential databases and other external telemetry, we attributed them to named individuals. We also determined that these selectors were being used for additional, identifiable fraudulent activity. Topics: [Cybersecurity](https://blog.nisos.com/case-studies/topic/cybersecurity) [Case Study](https://blog.nisos.com/case-studies/topic/case-study) [platform abuse](https://blog.nisos.com/case-studies/topic/platform-abuse) [Continue Reading](https://blog.nisos.com/case-studies/identifying-and-disrupting-platform-abuse-in-the-gig-economy) [All posts](https://blog.nisos.com/case-studies/all) ### Featured ![](https://blog.nisos.com/hubfs/Nisos-Logo-White.png) Responsive strategies and intelligent defenses for protecting your enterprise. - Services - Managed Intelligence - Security Investigations - Why Nisos - Company - Resources - [Blog](https://blog.nisos.com/blog) - [Case Studies](https://blog.nisos.com/case-studies) - [White Papers](https://blog.nisos.com/technical-blogs) - [Podcast](https://blog.nisos.com/podcast) - [News](https://blog.nisos.com/news) - Contact ###### Contact Us [1-703-382-8400](tel:1-703-382-8400) [info@nisos.com](mailto:info@nisos.com) 603 King Street, Suite 300 Alexandria, VA 22314 [![Learn More](https://no-cache.hubspot.com/cta/default/6068438/043dbe58-e265-499f-8574-2e0d1b4d410e.png)](https://cta-redirect.hubspot.com/cta/redirect/6068438/043dbe58-e265-499f-8574-2e0d1b4d410e) ©2020 Nisos. All rights reserved. - Terms - Cookie Policy - Privacy Policy