“Decoding Political Violence with OSINT and Lessons from the Frontline”

Join deep dive: Wed, Dec 18, 16:00 CET
01 Dec 2022

Investigation into Europe’s Shadow Army: Exploitation of Refugees in the European Union

Maltego Team

In September 2022, Maltego had the pleasure to host the webinar, “Exploitation of refugees in the European Union,” with Bashar Deeb and Klaas van Dijken from Lighthouse Reports. Bashar shared with us the difficult and dangerous path they followed to complete an OSINT and Maltego-based investigation: Masked Men – A Lighthouse Reports Investigation into Europe’s Shadow Border Army.

Lighthouse Reports’ Investigation into Europe’s Shadow Border Armies 🔗︎

Unmasking Europe’s shadow armies was an eight-month-long investigation on masked men operating in Greece and Croatia. These masked men have been reported as having performed physical assaults, illegal pushbacks, reckless endangerment, and rights abuses on asylum seekers and migrants.

Led by Lighthouse Reports, the investigation started by gathering testimony from asylum seekers about the violence they suffered at Europe’s borders by men wearing balaclavas. The investigation aimed to uncover the organizations and their units responsible for these acts.

Investigation Revelation: Who Are The Shadow Armies? 🔗︎

Lighthouse Reports’ investigations led to the following revelations and consequences:

  • The Croatian government admitted to carrying out these activities and three of their officers are suspended and under investigation.
  • The Greek government denied allegations to any unlawful involvement at the Greek sea borders despite video evidence linking the masked men to a Greek coast guard unit.
  • Audio testimonies from both migrant witnesses and Greek police officers alleged that the Greek government recruited and coerced migrants to carry out illegal and violent asylum-seeking interventions.

The Lighthouse Reports findings were published in early October 2021, it received attention from the general public, but also from politicians in different European countries, and above all, Brussels. The European Parliament stepped in and looked into the topic by the end of October 2021. The European Commission of Home Affairs asked different ministers from both Croatia and Greece to explain themselves.

On a local level, asylum seekers who are still trying to cross borders and ask for asylum have reported that violence completely went down in Croatia. People are still being sent back, but it is now possible to claim asylum. This development is a direct impact of the investigation.

Investigation Methods & Workflows 🔗︎

Lighthouse Reports used a combination of OSINT and Maltego to conduct their investigations.

OSINT in Videos and Pictures 🔗︎

They gathered and examined videos and pictures provided by asylum seekers and refugees, on-site journalists, witnesses, and other sources that captured scenes where asylum seekers and refugees faced violence from masked men. From the videos and pictures, they identified unique objects that could point to useful information:

  1. Uniform jackets with identical diamond patterns and pocket placement (in the Croatian case)
  2. Speedboat with distinctive metal features (in the Greek case)
  3. Unique acronym printed on the uniform (in the Greek case)

This helped the investigators establish connection between the masked men in Croatian and the Croatian Intervention Police, and the masked men on Greek sea and the Greek coast guard.

Maltego and Social Media Intelligence 🔗︎

In the Croatian case, Lighthouse Reports then used Maltego and social media intelligence to confirm and further identify the actual police units operating in the same area. Starting from the Croatian Intervention Police’s Facebook page, they found 65 Facebook users who used this specific tag in their profile as their current employer.

From these 65 officer profiles, they eventually identified 200 officers working at the same unit or as border guards and obtained phone numbers of some of these officers through previously leaked Facebook data.

Witness Testimonies and Accomplice Corroboration 🔗︎

Lighthouse Reports also relied on witness testimony and accomplice confession to corroborate the information they collected and fact check their hypothesis.

They spoke to some of the officers working at the Croatian Intervention Police, who admitted to the findings of the reporting. They also interviewed refugees who underwent such violence as well as migrants who were recruited and forced to carry out illegal violent activities for the Greek police. Finally, they acquired confessions from the Greek police officers of using third-country nationals for illegal deportations of refugees.

Download this Case Study for A Detailed Investigation Walk-Through! 🔗︎

This case study documented in detail how Lighthouse Reports conducted all three of their investigations:

  1. Masked Men in Croatia
  2. Masked Men at Greek Sea Border
  3. Greece’s Recruitment of Migrants for Illegal Asylum-Seeking Interventions

Download it now to learn about their OSINT techniques and journalistic approach!

Download the resource

DE +49
Albania +355
Algeria +213
Andorra +376
Angola +244
Anguilla +1264
Antigua And Barbuda +1268
Argentina +54
Armenia +374
Aruba +297
Australia +61
Austria +43
Azerbaijan +994
Bahamas +1242
Bahrain +973
Bangladesh +880
Barbados +1246
Belarus +375
Belgium +32
Belize +501
Benin +229
Bermuda +1441
Bhutan +975
Bolivia +591
Bosnia and Herzegovina +387
Botswana +267
Brazil +55
Brunei Darussalam +673
Bulgaria +359
Burkina Faso +226
Burundi +257
Cambodia +855
Cameroon +237
Canada +1
Cape Verde +238
Cayman Islands +1345
Central African Republic +236
Chile +56
China +86
Cote d'Ivoire +225
Colombia +57
Comoros +269
Congo +242
Cook Islands +682
Costa Rica +506
Croatia +385
Cuba +53
Cyprus +90392
Czech Republic +42
Denmark +45
Djibouti +253
Dominica +1809
Dominican Republic +1809
Ecuador +593
Egypt +20
El Salvador +503
Equatorial Guinea +240
Eritrea +291
Estonia +372
Ethiopia +251
Falkland Islands (Malvinas) +500
Faroe Islands +298
Fiji +679
Finland +358
France +33
French Guiana +594
French Polynesia +689
Gabon +241
Gambia +220
Georgia +995
Germany +49
Ghana +233
Gibraltar +350
Greece +30
Greenland +299
Grenada +1473
Guadeloupe +590
Guam +671
Guatemala +502
Guinea +224
Guinea-Bissau +245
Guyana +592
Haiti +509
Honduras +504
Hong Kong +852
Hungary +36
Iceland +354
India +91
Indonesia +62
Iran, Islamic Republic of +98
Iraq +964
Ireland +353
Israel +972
Italy +39
Jamaica +1876
Japan +81
Jordan +962
Kazakhstan +7
Kenya +254
Kiribati +686
Korea, Democratic People's Republic of +850
Korea, Republic of +82
Kuwait +965
Kyrgyzstan +996
Lao People's Democratic Republic +856
Latvia +371
Lebanon +961
Lesotho +266
Liberia +231
Libyan Arab Jamahiriya +218
Liechtenstein +417
Lithuania +370
Luxembourg +352
Macao +853
Macedonia, the former Yugoslav Republic of +389
Madagascar +261
Malawi +265
Malaysia +60
Maldives +960
Mali +223
Malta +356
Marshall Islands +692
Martinique +596
Mauritania +222
Mauritius +230
Mayotte +269
Mexico +52
Micronesia, Federated States of +691
Moldova, Republic of +373
Monaco +377
Mongolia +976
Montserrat +1664
Morocco +212
Mozambique +258
Myanmar +95
Namibia +264
Nauru +674
Nepal +977
Netherlands +31
New Caledonia +687
New Zealand +64
Nicaragua +505
Niger +227
Nigeria +234
Niue +683
Norfolk Island +672
Northern Mariana Islands +670
Norway +47
Oman +968
Pakistan +92
Palau +680
Panama +507
Papua New Guinea +675
Paraguay +595
Peru +51
Philippines +63
Poland +48
Portugal +351
Puerto Rico +1787
Qatar +974
Reunion +262
Romania +40
Russian Federation +7
Rwanda +250
San Marino +378
Sao Tome and Principe +239
Saudi Arabia +966
Senegal +221
Serbia +381
Seychelles +248
Sierra Leone +232
Singapore +65
Slovakia +421
Slovenia +386
Solomon Islands +677
Somalia +252
South Africa +27
Spain +34
Sri Lanka +94
Saint Helena +290
Saint Kitts and Nevis +1869
Saint Lucia +1758
Sudan +249
Suriname +597
Swaziland +268
Sweden +46
Switzerland +41
Syrian Arab Republic +963
Taiwan +886
Tajikistan +7
Thailand +66
Togo +228
Tonga +676
Trinidad and Tobago +1868
Tunisia +216
Turkey +90
Turkmenistan +993
Turks and Caicos Islands +1649
Tuvalu +688
Uganda +256
United Kingdom +44
Ukraine +380
United Arab Emirates +971
Uruguay +598
United States +1
Uzbekistan +7
Vanuatu +678
Holy See (Vatican City State) +379
Venezuela +58
Viet Nam +84
Virgin Islands, British +84
Virgin Islands, U.S. +84
Wallis and Futuna +681
Yemen +967
Zambia +260
Zimbabwe +263

By clicking on "Access", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.

Don’t forget to follow us on Twitter and LinkedIn and sign up to our email newsletter, so you don’t miss out on updates and news!

Happy investigating!

About Lighthouse Reports 🔗︎

Lighthouse Reports is a non-profit based in the Netherlands that leads complex transnational investigations blending traditional journalistic methods such as freedom of information requests with emerging techniques like open source intelligence and specialisms like data science.

Read more about Lighthouse Reports’ findings here: Masked Men – A Lighthouse Reports Investigation into Europe’s Shadow Border Army

The Maltego Academic & Non-Profit Research Program 🔗︎

With the Maltego Academic and Non-Profit program, Maltego aims to encourage continued innovation within the Maltego community. We empower highly motivated and talented individuals who can help create awareness of our tool and create user-based knowledge around Maltego in relevant and important topics.

Maltego supported Lighthouse Reports as part of the Academic Program with the investigative resources required for this investigation.

Learn more about the Maltego Academic & Non-Profit Program here.

By clicking on "Subscribe", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.