Sock Puppets

In general a sock puppet is a fake identity created by an individual or organization to manipulate public opinion and deceive others. The purpose of using sock puppets might be to create the illusion of a large number of people supporting or endorsing a particular position, product, or idea, when in reality there may only be a few individuals behind the accounts. Sock puppets are often used for marketing purposes and political campaigns to increase visibility and influence.

In penetration testing your sock puppets are the fake people, an alternate identities with fake accounts that you use to infiltrate or research targets. A good sock puppet does not draw any attention back to you (back to your IP address, your identity, your devices, or anything to do with you). The main goal of the sock puppet is to be the fake identify that you use to do your OSINT research.

When you are investigating someone or something the goal is to never let them become aware of you and that you are looking into them.

The social accounts for the sock puppets should have data, look like they are current and being used, updated, etc. It has to look legitimate.