Venator: Hunting & Smashing Trolls on Twitter

In this investigative session at the DEF CON 29 Recon Village, Mauro Eldritch and Santiago Perez Montaño from DEF CON Group DC5411 present "Venator," an open-source OSINT framework designed to detect, track, and disrupt coordinated political troll farms and automated bot armies on Twitter. They begin at 08:00 by examining the structural organization of digital influence operations, explaining how troll managers coordinate automated bot clusters and human operators to manufacture viral astroturfing campaigns.

The speakers describe deploying decoy persona accounts at 16:00, explaining how deliberately tailored profile photos and bio configurations were used to attract troll engagement. At 24:00, they reveal how they infiltrated closed, numbered coordination channels on instant messaging platforms used by operators to orchestrate mass posting waves. At 32:00, they demonstrate algorithmic trend analysis, showing that authentic public engagement develops organically, whereas manufactured troll campaigns display unnatural, razor-sharp volume spikes that immediately collapse once campaign targets are met.

Turning to defensive response at 40:00, the authors illustrate how Venator flags coordinated hashtag poisoning and extracts participating bot clusters for bulk reporting and blocking. They finish at 47:00 by releasing the Venator tooling to the public, offering security researchers practical methodologies to monitor and analyze digital disinformation networks. (AI summary — Gemini Flash)