OSINT: Unmasking John Mark Dougan's Disinformation Empire

This conference talk from Recon Village at DEF CON 32 explores how Clemson University's Media Forensics Center used OSINT techniques to investigate John Mark Dougan's disinformation network. Discover how researchers uncovered and mapped over 160 fake news websites operated by the former Sheriff's Deputy now living in Russia. Learn about the digital forensic methods employed, including server log analysis, domain registration tracking, and IP monitoring that revealed how false narratives are created and distributed across multiple platforms. The presentation covers attribution techniques that connected the network to its operator, the role of AI and language models in generating deceptive content, and practical approaches for identifying and countering large-scale disinformation operations. Presented by Steven Sheffield on August 9, 2024, this 37-minute session provides valuable insights for security professionals, researchers, and anyone interested in combating digital deception through open-source intelligence gathering.